Создать сервисный аккаунт

$ ant beta:organization:service-accounts create

POST/v1/organizations/service_accounts

Требуется токен доступа OAuth с областью org:admin, полученный через ant auth login --scope org:admin или правило федерации удостоверений рабочих нагрузок; ключи Admin API не принимаются. См. Управление WIF с помощью Admin API.

Создать сервисный аккаунт.

Сервисный аккаунт — это именованное удостоверение рабочей нагрузки, на которое нацелены правила федерации. organization_role — developer (по умолчанию) или admin; правило может быть создано или перенацелено для предоставления области org:admin только в том случае, если organization_role целевого аккаунта равна admin. Создание сервисного аккаунта с ролью admin требует интерактивных учётных данных (пользовательского токена OAuth или сеанса Console) — рабочая нагрузка может создавать только сервисные аккаунты с ролью developer.

Parameters

--name: string

Body param: Slug identifier (lowercase, digits, hyphens). Unique within the organization; a duplicate name returns 409.

maxLength255

minLength1

--description: optional string

Body param: Optional free-text description.

maxLength2000

--organization-role: optional "admin" or "developer"

Body param: Org-level role. Defaults to developer.

--beta: optional array of AnthropicBeta

Header param: Optional header to specify the beta version(s) you want to use.

Returns

beta_service_account: object{ id, archived_at, archived_by_actor_id, 8 more }

Named non-human identity within the caller's organization.

A service account is a pure identity: name + org. Authorization lives on whatever references it (federation rules).

id: string

Tagged ID of the service account.

archived_at: string

If set, this service account is archived.

formatdate-time

archived_by_actor_id: string

Tagged ID (user_/svac_) of the actor that archived this service account.

created_at: string

When this service account was created.

formatdate-time

created_by_actor_id: string

Tagged ID (user_/svac_) of the actor that created this service account.

description: string

Optional free-text description.

name: string

Admin-chosen slug identifier.

organization_role: "admin" or "developer"

Org-level role. A federation rule may only be created or retargeted to grant org:admin scope when this is admin. A rule granting org:admin whose target is later demoted to developer is rejected at token exchange. Rules granting org:admin are managed in the Console.

One of the following:

"admin"

"developer"

type: "service_account"

updated_at: string

When this service account was last updated.

formatdate-time

updated_by_actor_id: string

Tagged ID (user_/svac_) of the actor that last updated this service account.

Создать сервисный аккаунт

ant beta:organization:service-accounts create \
  --api-key my-anthropic-api-key \
  --name ci-deploy-bot

Response 200

{
  "id": "svac_01SDCCSbTxrXDpWc1phhtcfK",
  "archived_at": "2019-12-27T18:11:19.117Z",
  "archived_by_actor_id": "archived_by_actor_id",
  "created_at": "2024-10-30T23:58:27.427722Z",
  "created_by_actor_id": "created_by_actor_id",
  "description": "description",
  "name": "ci-deploy-bot",
  "organization_role": "admin",
  "type": "service_account",
  "updated_at": "2024-10-30T23:58:27.427722Z",
  "updated_by_actor_id": "updated_by_actor_id"
}

Returns Examples

Response 200

{
  "id": "svac_01SDCCSbTxrXDpWc1phhtcfK",
  "archived_at": "2019-12-27T18:11:19.117Z",
  "archived_by_actor_id": "archived_by_actor_id",
  "created_at": "2024-10-30T23:58:27.427722Z",
  "created_by_actor_id": "created_by_actor_id",
  "description": "description",
  "name": "ci-deploy-bot",
  "organization_role": "admin",
  "type": "service_account",
  "updated_at": "2024-10-30T23:58:27.427722Z",
  "updated_by_actor_id": "updated_by_actor_id"
}