Hello all, I’m happy to announce that you can now change the service account or access scopes on a stopped VM. This feature is available to all users via a beta command, as documented at https://cloud.google.com/compute/docs/access/create-enable-service-accounts-for-instances#changeserviceaccountandscopes
Thanks for your patience while we completed deploying this feature.
Note, we are still planning to add the ability to change scopes on a running VM in a future update (it’s at the very top of our list, we know it is a highly requested feature).Philip Hutchins commented
Yeah, definitely would like to see this happen soon. Whats the status? Appears like it's been 'coming soon' for quite some time... At least the ability to stop an instance and change API access would suffice.