gcloud beta iam roles undelete ROLE_ID (--organization=ORGANIZATION | --project=PROJECT_ID) [GCLOUD_WIDE_FLAG …]
(BETA) This command undeletes a role. Roles that have been deleted
for certain long time can't be undeleted.
This command can fail for the following reasons:
ProjectUpdater1234567gcloud beta iam roles undelete ProjectUpdater --organization=1234567
To undelete the role ProjectUpdatermyproject
gcloud beta iam roles undelete ProjectUpdater --project=myprojectROLE_ID--organization or --project flag.
--organization=ORGANIZATION--project=PROJECT_ID
The Google Cloud project ID to use for this invocation. If omitted, then the
current project is assumed; the current project can be listed using gcloud
config list --format='text(core.project)' and can be set using
gcloud config set project PROJECTID.
--project and its fallback core/project property play
two roles in the invocation. It specifies the project of the resource to operate
on. It also specifies the project for API enablement check, quota, and billing.
To specify a different project for quota and billing, use
--billing-project or billing/quota_project property.
--access-token-file,
--account, --billing-project,
--configuration,
--flags-file,
--flatten, --format, --help, --impersonate-service-account,
--log-http,
--project, --quiet, --trace-token, --user-output-enabled,
--verbosity.
Run $ gcloud help for details.
gcloud iam roles undeletegcloud alpha iam roles undelete
Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2026-05-27 UTC.