Create a service account

Can be used by the following roles assigned at the organization scope:

• ORG_ADMIN
• CLUSTER_ADMIN

POST /api/v1/service-accounts

cURL

cURL

curl --request POST \
  --url https://cockroachlabs.cloud/api/v1/service-accounts \
  --header 'Authorization: Bearer REPLACE_BEARER_TOKEN' \
  --json '{"description":"","name":"new name","roles":[{"name":"CLUSTER_ADMIN","resource":{"type":"ORGANIZATION"}}]}'

200

{
  "created_at": "2022-03-22T20:23:11.285067Z",
  "creator_name": "creator",
  "description": "",
  "group_roles": [],
  "id": "12345678-1234-1234-1234-123456789012",
  "name": "SA Name",
  "roles": [
    {
      "name": "CLUSTER_ADMIN",
      "resource": {
        "type": "ORGANIZATION"
      }
    }
  ]
}

{
  "code": 123,
  "details": [
    {
      "@type": "<string>"
    }
  ],
  "message": "<string>"
}

Authorizations

Authorization · string · header · required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Body

application/json

description · string · required

description of the service account.

name · string · required

name of the service account.

roles · object[] · required

roles that are assigned to the service account.

Show child attributes

Response

200

application/json

A successful response.

A service account is an identity scoped to an organization that represents a non-human user.

created_at · string<date-time> · required

created_at represents the creation time of the service account.

creator_name · string · required

creator_name is the name of user that created the service account.

description · string · required

description of the service account.

group_roles · object[] · required

roles that the service account has inherited via a group.

Show child attributes

id · string · required

The ID of the service account.

name · string · required

name of the service account.

roles · object[] · required

roles that are assigned to the service account.

Show child attributes