astroctl organization service-account
Manage the service accounts of the active organization
Synopsis
Manage the service accounts of the active organization.
A service account is a login for automation, not a person. CI pipelines, scripts and SDK code sign in with one of its API keys and act with its role (Viewer, Editor or Admin). Only organization admins and owners can manage service accounts; AstroPulse refuses everyone else.
Wherever a command takes a service account, pass its name or its ID.
Terminal
astroctl organization service-account [flags]
Examples
Terminal
# Create a service account for CI and issue it a key
astroctl org service-account create --name ci --role Editor
astroctl org service-account keys create ci --duration 720h
# See what exists
astroctl org service-account list
# Change its role
astroctl org service-account update ci --role Viewer
# Retire it, together with all of its keys
astroctl org service-account archive ci
# Using short alias
astroctl org sa list
Options
Terminal
-h, --help help for service-account
Options inherited from parent commands
Terminal
-o, --output string Output format (table|json|yaml) (default "table")
SEE ALSO
- astroctl organization - Manage organizations
- astroctl organization service-account archive - Archive a service account and disable all of its keys
- astroctl organization service-account create - Create a service account
- astroctl organization service-account get - Show a service account
- astroctl organization service-account keys - Issue, list and revoke a service account's API keys
- astroctl organization service-account list - List the service accounts of the active organization
- astroctl organization service-account update - Change a service account's name, role or description