diff --git a/changelog/unreleased/add-trach-bin-cli.md b/changelog/unreleased/add-trach-bin-cli.md
new file mode 100644
index 0000000000..ed6a896e4e
--- /dev/null
+++ b/changelog/unreleased/add-trach-bin-cli.md
@@ -0,0 +1,6 @@
+Enhancement: Add additional permissions to service accounts
+
+We added the `RestoreRecycleItem` and `Delete` permissions to service accounts 
+
+https://github.com/cs3org/reva/pull/4392
+https://github.com/owncloud/ocis/issues/7845
diff --git a/pkg/storage/utils/decomposedfs/node/permissions.go b/pkg/storage/utils/decomposedfs/node/permissions.go
index 84814a1641..1367a6d5d8 100644
--- a/pkg/storage/utils/decomposedfs/node/permissions.go
+++ b/pkg/storage/utils/decomposedfs/node/permissions.go
@@ -97,6 +97,8 @@ func ServiceAccountPermissions() provider.ResourcePermissions {
 		RemoveGrant:          true, // for share expiry
 		ListRecycle:          true, // for purge-trash-bin command
 		PurgeRecycle:         true, // for purge-trash-bin command
+		RestoreRecycleItem:   true, // for cli restore command
+		Delete:               true, // for cli restore command with replace option
 	}
 }