How to create a service account

This document provides information on how to create a service account, used by applications, scripts, or services to interact with the Cloud Security platform.

Create a service account

To create a service account, see the following steps:

1. Access the Cloud Security platform.
2. Click the User menu icon.
3. In the dropdown menu, click Admin console.
4. In the Tenant settings menu, click Service accounts.
5. In the Service accounts report, click + Add service account.
6. In the Name * field, enter a name for the service account.
7. In the Roles tab, select the roles you want to add to the service account.
   Info

   If you want to automate user provisioning using an Identity Provider (IdP), the service account must have the specific SCIM Management role. More information in About service accounts and About user provisioning with SCIM 2.0.

8. In the Access keys tab, add the desired keys to the service account:
   1. Name: enter a name for the access key.
   2. Valid until: enter the expiration date of the access key.
   3. Click + Add key.
   Info

   When you add the access keys during the creation of the service account, the Access key secrets modal will be displayed with the Client ID, Client Secret, and Tenant ID information. Make sure to copy the Client Secret. For security reasons, it will not be displayed again. If you lose the secret, you’ll have to generate a new key for the current service account.

9. Click Save.

Once the service account is created, it will be displayed on the Service accounts report screen.