Manage Service Accounts for StreamNative Cloud
The sections below provide detailed instructions on managing service accounts (SAs) in StreamNative Cloud, including creating and managing service accounts using StreamNative Cloud Console, snctl, and StreamNative Terraform Provider.
Create a service account
When creating a service account, you can optionally enable Super Admin access. A service account with Super Admin privileges has full management capabilities over all resources within the organization. By default, service accounts are created without Super Admin access.
Service accounts cannot be edited after creation. If you need a service account to have Super Admin access, make sure to enable it during the initial creation.
You can create a service account using the following methods:
-
In the upper-right corner of the StreamNative Cloud Console, click your Profile and select Accounts & Accesses.
-
On the left navigation pane, click Service Accounts.
-
On the Service Account page, click + New Service Account.
-
On the Create Service Account dialog, enter a name for the service account.
-
(Optional) Check Super Admin to grant the service account with Super Admin access.
-
Click Confirm.
After you have created a service account, you can check the details of the service account.
The Service Accounts page displays all the created service accounts.
The table below describes the details that you can view about the service account.
| Item | Description |
|---|---|
| Name | The name of the service account. |
| Principal Name | The principal name of the service account used for identification during authentication. |
| Active API tokens | The number of active API keys for the service account. |
| Create Time | The time when the service account was created. |
| ServiceAccount Bindings | The list of service account bindings. |
| Status | The status of the service account. |
| Admin | Whether the service account has Super Admin enabled or not. |
| … | Click the ellipsis to access more actions. |
-
In the upper-right corner of the StreamNative Cloud Console, click your Profile and select Accounts & Accesses.
-
On the left navigation pane, click Service Accounts.
-
On the Service Account page, click + New Service Account.
-
On the Create Service Account dialog, enter a name for the service account.
-
(Optional) Check Super Admin to grant the service account with Super Admin access.
-
Click Confirm.
After you have created a service account, you can check the details of the service account.
The Service Accounts page displays all the created service accounts.
The table below describes the details that you can view about the service account.
| Item | Description |
|---|---|
| Name | The name of the service account. |
| Principal Name | The principal name of the service account used for identification during authentication. |
| Active API tokens | The number of active API keys for the service account. |
| Create Time | The time when the service account was created. |
| ServiceAccount Bindings | The list of service account bindings. |
| Status | The status of the service account. |
| Admin | Whether the service account has Super Admin enabled or not. |
| … | Click the ellipsis to access more actions. |
You can create a service account using the snctl CLI. Please make sure that you have installed and configured the snctl CLI.
Prepare a yaml file that defines the service account, called service-account.yaml. An example is as follows:
Create the service account.
After you have created a service account, you need to:
- Grant your service account with necessary permissions. See Control Access to StreamNative Cloud.
- Configure your applications to use the service account to authenticate to StreamNative Cloud:
Delete a service account
To delete a service account, follow these steps.
-
On the left navigation pane, click Service Accounts.
-
Click the ellipsis at the end of the row of the service account you want to delete, and then select Delete.
-
On the dialog box asking, Are you sure you want to delete this service account?, click Confirm.
To delete a service account, follow these steps.
-
On the left navigation pane, click Service Accounts.
-
Click the ellipsis at the end of the row of the service account you want to delete, and then select Delete.
-
On the dialog box asking, Are you sure you want to delete this service account?, click Confirm.