Créer un compte de service

$ ant organization:service-accounts create

POST/v1/organizations/service_accounts

Nécessite un jeton d'accès OAuth avec la portée org:admin, obtenu via ant auth login --scope org:admin ou une règle de workload identity federation (fédération d'identité de charge de travail) ; les clés Admin API ne sont pas acceptées. Consultez Gérer WIF avec l'Admin API.

Créez un compte de service.

Un compte de service est une identité de charge de travail nommée que ciblent les règles de fédération. organization_role vaut developer (par défaut) ou admin ; une règle ne peut être créée ou reciblée pour accorder la portée org:admin que lorsque l'organization_role de la cible est admin. La création d'un compte de service avec le rôle admin nécessite un identifiant interactif (un jeton OAuth utilisateur ou une session Console) — une charge de travail ne peut créer que des comptes de service avec le rôle developer.

Parameters

--name: string

Slug identifier (lowercase, digits, hyphens). Unique within the organization; a duplicate name returns 409.

minLength1

maxLength255

--description: optional string

Optional free-text description.

maxLength2000

--organization-role: optional "admin" or "developer"

Org-level role. Defaults to developer.

Returns

service_account: object{ type: "service_account", id, archived_at, 8 more }

Named non-human identity within the caller's organization.

A service account is a pure identity: name + org. Authorization lives on whatever references it (federation rules).

type: "service_account"

id: string

Tagged ID of the service account.

archived_at: string

If set, this service account is archived.

formatdate-time

archived_by_actor_id: string

Tagged ID (user_/svac_) of the actor that archived this service account.

created_at: string

When this service account was created.

formatdate-time

created_by_actor_id: string

Tagged ID (user_/svac_) of the actor that created this service account.

description: string

Optional free-text description.

name: string

Admin-chosen slug identifier.

organization_role: "admin" or "developer"

Org-level role. A federation rule may only be created or retargeted to grant org:admin scope when this is admin. A rule granting org:admin whose target is later demoted to developer is rejected at token exchange. Rules granting org:admin are managed in the Console.

One of the following:

"admin"

"developer"

updated_at: string

When this service account was last updated.

formatdate-time

updated_by_actor_id: string

Tagged ID (user_/svac_) of the actor that last updated this service account.

Créer un compte de service

ant organization:service-accounts create \
  --api-key my-anthropic-api-key \
  --name ci-deploy-bot

Response 200

{
  "id": "svac_01SDCCSbTxrXDpWc1phhtcfK",
  "archived_at": "2019-12-27T18:11:19.117Z",
  "archived_by_actor_id": "archived_by_actor_id",
  "created_at": "2024-10-30T23:58:27.427722Z",
  "created_by_actor_id": "created_by_actor_id",
  "description": "description",
  "name": "ci-deploy-bot",
  "organization_role": "admin",
  "type": "service_account",
  "updated_at": "2024-10-30T23:58:27.427722Z",
  "updated_by_actor_id": "updated_by_actor_id"
}

Returns Examples

Response 200

{
  "id": "svac_01SDCCSbTxrXDpWc1phhtcfK",
  "archived_at": "2019-12-27T18:11:19.117Z",
  "archived_by_actor_id": "archived_by_actor_id",
  "created_at": "2024-10-30T23:58:27.427722Z",
  "created_by_actor_id": "created_by_actor_id",
  "description": "description",
  "name": "ci-deploy-bot",
  "organization_role": "admin",
  "type": "service_account",
  "updated_at": "2024-10-30T23:58:27.427722Z",
  "updated_by_actor_id": "updated_by_actor_id"
}