Appearance
How do I create a service account / API credential?
Who can do this
Owner or Admin
Service accounts are non-human identities used by your scripts, CI jobs, or back-office tools to call Console APIs. Each has a client ID + secret pair and a scoped set of grants.
Steps
- Open Settings → Service Accounts.
- Click New Service Account.
- Fill in:
- Name — e.g.
ci-deploy-bot. - Description — what this account does (helps future-you).
- Grants — pick the API surfaces it needs. Default is read-only.
- Name — e.g.
- Click Create.
- The credentials modal appears with the Client ID and Client Secret. Copy them now — the secret is shown only once.
Result
The service account appears in the table with status Active. Your scripts use the client ID and secret to obtain an access token via OAuth2 client-credentials flow, then call the Console API as that account.
Lost the secret
Use Rotate Secret on the row's actions menu. The old secret is revoked immediately and a fresh one is shown — copy it before closing the modal.

