> ## Documentation Index
> Fetch the complete documentation index at: https://docs.cloud.cdata.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Service Accounts

> The **Service Accounts** tab on the ***Users*** page enables you to manage non-human identities on your Connect AI account.

A **Service Account** is a non-human identity, such as an agent, that is authorized to interact with Connect AI. Service accounts authenticate via OAuth 2.0 Client Credentials. Use them to grant programmatic access to scripts, jobs, and external services.

<Frame>
  <img src="https://mintcdn.com/cdata/pR0vg9SVg960Gkdl/en/images/service_accounts.png?fit=max&auto=format&n=pR0vg9SVg960Gkdl&q=85&s=b6d998e154ff437727ee9421e5b240b3" alt="Service Accounts" width="1267" height="515" data-path="en/images/service_accounts.png" />
</Frame>

The **Service Accounts** tab contains the following information:

* A row for every service account in your account:
  * **Name** is the service account name.
  * **Client Id** is the unique identifier used to authenticate the service account via OAuth 2.0 Client Credentials.
  * **Status** is the status of the service account (active or inactive). If you deactivate a service account, any services or automations using these credentials will fail on the next request. The service account remains in the registry for audit purposes.
  * **Created** is the date and time the service account was created.
  * Rotate, edit, and delete icons for the service account. When you rotate credentials, the current credentials stop working immediately. You must update dependent services before the next request.

## Add a Service Account

<Steps>
  <Step>
    In the **Service Accounts** tab of the **Users** page, click **Add Account** to open the **Add
    Service Account** page.

    <Frame>
      <img src="https://mintcdn.com/cdata/pR0vg9SVg960Gkdl/en/images/add_service_account.png?fit=max&auto=format&n=pR0vg9SVg960Gkdl&q=85&s=0b65b118ea6b36d51285ef5d87fabcbc" alt="Add a Service Account" width="601" height="497" data-path="en/images/add_service_account.png" />
    </Frame>
  </Step>

  <Step>Enter the **Name** of the service account.</Step>
  <Step>Enter a short **Description** of the service account.</Step>

  <Step>
    Select an **Authentication Type** of **Client Secret** or **Public Key**. If you select **Public
    Key**, you are asked to upload the public key (PEM) file (RS256 or ES256).
  </Step>

  <Step>Click **Confirm** to save the service account.</Step>

  <Step>
    If you selected **Client Secret**, an **Add Service Account** dialog appears. Copy the
    **Client Id** and **Client Secret**. The **Client Secret** only appears once.

    <Note>
      Share these credentials with the developer who will authenticate the service account using OAuth 2.0. See
      [Service Account Setup](/en/API/Service-Account-Setup) for details.
    </Note>
  </Step>

  <Step>
    Click **Done**. An **Edit Service Account** page appears.

    <Frame>
      <img src="https://mintcdn.com/cdata/pR0vg9SVg960Gkdl/en/images/edit_service_account.png?fit=max&auto=format&n=pR0vg9SVg960Gkdl&q=85&s=98a93e7c44443d839ea6a3bd3e32ec59" alt="Edit a Service Account" width="1002" height="762" data-path="en/images/edit_service_account.png" />
    </Frame>
  </Step>

  <Step>
    (Optional) Add an **Access Role** to the service account. Selecting an access role automatically
    updates the **Permissions** to the entities below.
  </Step>

  <Step>
    (Optional) In **Permissions**, manually select the service account's permissions to entities
    (data connections and workspaces) in your Connect AI instance. For more information about
    permissions, see [Permissions and Access Control](/en/Permissions).
  </Step>
</Steps>

## Edit a Service Account

You can modify any service account, rotate credentials, or delete a service account at any time by clicking the rotate, edit, or delete icons in the **Service Accounts** list.

In the **Edit Service Account** page, you can do the following:

* Edit the **Name** and **Description** fields.
* Add and remove access roles.
* Manually update permissions.
* Rotate credentials (the current credentials will stop working immediately).
* Delete the entire service account.