Skip to main content

Service accounts (M2M)

Partner calls use a service account credential as Authorization: Bearer <secret>.

Create (Console)​

  1. Sign in to console.<domain> as a Vendor admin.
  2. Open Operations → Integrations.
  3. Create a service account (code + display name).
  4. Copy the secret once — it is not shown again. Store it in your secret manager.

Create (API)​

POST /api/v1/service-accounts (permission service-accounts.manage). See Partner OpenAPI.

Grant only the Partner permissions you need (deny by default), for example: licenses.read, licenses.manage, customers.read, devices.read, commerce.read.

Rotate / disable​

  • Rotate: POST /api/v1/service-accounts/{id}/credentials/rotate
  • Disable: POST /api/v1/service-accounts/{id}/disable

Never commit live secrets. Never put service-account secrets in public docs samples.

Related​