Service accounts and API keys

For administrators 3 min read

Give automation and CI a machine identity with its own role and an API key you can rotate or disable.

A service account is a machine identity for automation. It carries a role, built-in or custom, and authenticates with an API key. Everything it does is checked against that role and recorded in the audit log under its name.

Create a service account

1. Open Service accounts and choose New service account.
2. Enter a Name, for example the pipeline it serves, and choose its Role.
3. Copy the API key from API key — copy it now. It's shown once and never again.
4. Choose I've saved it.

Rotate, disable or delete

• Rotate key issues a new key and stops the old one working.
• Disable stops the account authenticating without deleting it.
• Delete removes the account.