Stay organized with collections Save and categorize content based on your preferences.
After you create an App Engine application, the App Engine default service account is created and used as the identity of your App Engine app. The App Engine default service account is associated with your Google Cloud project and executes tasks on behalf of your apps running in App Engine.
Viewing the App Engine default service accountTo view your service accounts:
In the Google Cloud console, go to the Service accounts page.
Select your project.
In the list, locate the email address of the App Engine default service account:
YOUR_PROJECT_ID@appspot.gserviceaccount.com
Depending on your organization policy configuration, the default service account might automatically be granted the Editor role on your project. We strongly recommend that you disable the automatic role grant by enforcing the iam.automaticIamGrantsForDefaultServiceAccounts organization policy constraint. If you created your organization after May 3, 2024, this constraint is enforced by default.
If you disable the automatic role grant, you must decide which roles to grant to the default service accounts, and then grant these roles yourself.
If the default service account already has the Editor role, we recommend that you replace the Editor role with less permissive roles.To safely modify the service account's roles, use Policy Simulator to see the impact of the change, and then grant and revoke the appropriate roles.
Warning: Deleting the App Engine default service account breaks any current and future App Engine applications in your Google Cloud project. For example, your application will lose access to other Google Cloud services such as Datastore. If needed, you can restore a deleted default service account. Changing service account permissionsYou can use the Google Cloud console to grant or remove roles from the default service account. For example, you can downgrade the permissions used by the App Engine default service account by changing its role from Editor to whichever role(s) that best represent the access needs for your App Engine app.
To modify roles for the App Engine default service account:
In the Google Cloud console, go to the IAM page.
Select your project.
Locate the App Engine default service account in the Principals list. The App Engine default service account appears in the list if roles have been automatically or manually granted to the service account.
Select the edit button to modify the roles assigned to the service account.
Your App Engine app uses the credentials of the App Engine service account by default. For more information, see Granting your app access to Cloud services.
Restoring a deleted default service accountIf you delete your App Engine default service account, your App Engine application might break and lose access to other Google Cloud services, such as Datastore.
You can restore App Engine default service accounts that have been deleted within the last 30 days by following the steps in undeleting a service account.
More information about service accountsExcept as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2025-08-07 UTC.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-07 UTC."],[[["The App Engine default service account is automatically created when you create an App Engine application and is used as the identity for your app."],["You can view the App Engine default service account's email address in the Google Cloud console's Service Accounts page, which follows the format `YOUR_PROJECT_ID@appspot.gserviceaccount.com`."],["It's highly recommended to disable the automatic grant of the Editor role to the default service account, which can be done by enforcing the `iam.automaticIamGrantsForDefaultServiceAccounts` organization policy constraint, and instead manually grant necessary roles."],["Deleting the App Engine default service account will cause your App Engine application to break and lose access to other Google Cloud services, but it can be restored if deleted within the last 30 days."],["You can modify the roles assigned to the App Engine default service account, such as downgrading from Editor to more specific roles, via the IAM page in the Google Cloud console."]]],[]]
RetroSearch is an open source project built by @garambo | Open a GitHub Issue
Search and Browse the WWW like it's 1997 | Search results from DuckDuckGo
HTML:
3.2
| Encoding:
UTF-8
| Version:
0.7.4