Service Accounts

Service account management for server-to-server integrations

📄️ List service accounts

Retrieves all service accounts for a tenant with total count. Secrets are never returned in list operations.

📄️ Create service account

Creates a new service account for server-to-server integrations. Returns the client ID and secret - the secret is only shown once and cannot be retrieved again. Use role assignments to grant permissions.

📄️ Get service account

Retrieves a specific service account by ID. The secret is never returned.

📄️ Update service account

Updates a service account's settings including name, description, IP restrictions, and expiration. Cannot change the client ID or secret. Use role assignments to manage permissions.

📄️ Delete service account

Permanently deletes a service account. This action cannot be undone.

📄️ Revoke service account

Immediately deactivates a service account, preventing any further authentication. This is useful for emergency situations where a secret may have been compromised.

📄️ Rotate service account secret

Generates a new client secret for the service account. The old secret remains valid for a 24-hour grace period to allow for seamless rotation.