cub serviceaccount

cub serviceaccount

Service account commands

Synopsis

The serviceaccount subcommands manage ServiceAccount entities.

A service account is an identity for something that is not a person, such as a CI pipeline or an agent. It has an identity of its own in ConfigHub, created with it, which is not linked to any person or to any account in the identity provider; the only way to authenticate as it is with one of its keys. The identity's ID is the service account's UserID.

Grant a service account access by naming it in an entity's permissions (--permission View:serviceaccount:), by adding it to a group (cub group add serviceaccount:), or by giving it an organization role with --org-role. Who may manage the service account is set by its own permissions.

Anyone in the organization may create a service account and becomes its manager. The organization role given to it cannot be above the caller's own, and changing the role requires Manage permission on the service account.

Deleting a service account deletes its keys and disables its identity, which is kept so that the changes it made stay recorded under its UserID.

Options

  -h, --help   help for serviceaccount

Options inherited from parent commands

      --context string   The context to use for this command
      --debug            Debug output

SEE ALSO

• cub - ConfigHub CLI
• cub serviceaccount create - Create a service account
• cub serviceaccount delete - Delete a service account or multiple service accounts
• cub serviceaccount explain - Explain ServiceAccount fields from the OpenAPI spec
• cub serviceaccount get - Get details about a service account
• cub serviceaccount key - Manage the public keys a service account authenticates with
• cub serviceaccount list - List service accounts
• cub serviceaccount token - Manage the long-lived tokens a service account authenticates with
• cub serviceaccount update - Update a service account or multiple service accounts