Skip to main content

Create a service account

Reviewed on · View on GitHub

A service account automates tasks or carries out operations on behalf of a user. It is characterized by a name, an access key and a secret code. For creation, a name must be provided by the user and the command returns the access key and the secret code associated with this account.

Permissions​

info

This action requires the following IAM (Identity and Access Management) permissions:

  • iam.serviceAccount.create

Console​

From the left-hand side menu, click IAM → Service Accounts.

After the creation, the console displays the access key/secret code, then the spaces, roles and permissions assignment screens illustrated below.

  1. In the IAM menu, click Service Accounts. You access the dashboard dedicated to service accounts.

  2. In the Service Accounts dashboard, click the Create Service Account button. A new window appears.

  3. In the new window, enter the information for the new service account:

    • "Service Account name":
      • the name of the account owner or of the associated technical service. The allowed characters are a-z, A-Z, 0-9 and _;
    • "Expiration date":
      • the date after which this service account can no longer request a new access token and will be denied any connection to Numspot;
    • "Token duration":
      • the access token allows the service account to authenticate to the Numspot service. Its lifetime ranges from 1 second to 48 hours (24 hours by default). At each new session, the service account must request a new token.

    Click the Create Service Account button.

  4. Securely store the new service account's information.

    warning

    Copy this security information, it will not be displayed again. The access key and the secret code may also be referred to as "access key/secret key" or "client id/client secret".

    FR_access-key_secrect-key

    Then click the Assign roles and permissions button.

  5. "Spaces" step: choose the spaces to associate with the service account, then click Save spaces. You can also click Skip step.

  6. "Roles" step: select the "Organisation" tab or the relevant space, tick the roles to assign, then click Save roles. You can also click Do not assign roles or Skip step.

  7. "Permissions" step: select the "Organisation" tab or the relevant space, tick the permissions to assign, then click Save permissions to complete the service account setup.

  8. A confirmation message is displayed at the bottom indicating that the service account's permissions have been saved.

You can create a service account from the profile of an existing service account: from the list or the details page, click Create a Service Account from this profile. The new service account inherits the same spaces, roles and permissions as the initial one.