# Service Account

## Overall

Using service account page, Users can manage credentials easily for each  cloud providers. Multi cloud resources are collected based on this credentials

![](https://402810733-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LzBJTlSpVTrcscLp2gb%2F-ME6nm7p2dBdnUabQZVU%2F-ME72P6CtEcqFdgIffLe%2F%E1%84%89%E1%85%B3%E1%84%8F%E1%85%B3%E1%84%85%E1%85%B5%E1%86%AB%E1%84%89%E1%85%A3%E1%86%BA%202020-08-07%20%E1%84%8B%E1%85%A9%E1%84%92%E1%85%AE%204.34.53%20%E1%84%87%E1%85%A9%E1%86%A8%E1%84%89%E1%85%A1%E1%84%87%E1%85%A9%E1%86%AB%202.png?alt=media\&token=ff2b753e-2123-4ccc-a672-f5ffb13a7a3c)

Listed jobs are available

* Adding ***Service Account***
* Deletion of ***Service Account*** /Changing ***project***
* Link to AWS Console

SpaceONE supports providers belows.&#x20;

* AWS
* Google Cloud
* Microsoft Azure
* MEGAZONE
* SpaceONE

## Adding Service Account

Users can add ***Service Account*** by select cloud provider and clicking ***+ Add*** button

In the user guide, we will focus on AWS\`s IAM

***Service Account*** will be easily added by fill out items marked with \*.

### Base Information

![](https://402810733-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LzBJTlSpVTrcscLp2gb%2F-ME73ElhPGAZ1zwePFku%2F-ME753TEj1JmRuzNGUD0%2F%E1%84%89%E1%85%B3%E1%84%8F%E1%85%B3%E1%84%85%E1%85%B5%E1%86%AB%E1%84%89%E1%85%A3%E1%86%BA%202020-08-07%20%E1%84%8B%E1%85%A9%E1%84%92%E1%85%AE%205.44.58.png?alt=media\&token=b10e39c9-a55e-4480-87a5-22d5880e4ff7)

* Name : Name of Service Account
* Account ID : Root Account ID.(12-digits)
* Tag : Additional ***Service Account***\`s tag

### Credentials

Two types of Service Accounts are available. (aws\_access\_key, aws\_assume\_role)

Input parameters for each types.&#x20;

#### aws\_access\_key &#x20;

![](https://402810733-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LzBJTlSpVTrcscLp2gb%2F-ME75OS2KciL1Xxcr7ds%2F-ME76EziTEkWOpu671l5%2F%E1%84%89%E1%85%B3%E1%84%8F%E1%85%B3%E1%84%85%E1%85%B5%E1%86%AB%E1%84%89%E1%85%A3%E1%86%BA%202020-08-07%20%E1%84%8B%E1%85%A9%E1%84%92%E1%85%AE%205.48.28.png?alt=media\&token=897fe36b-0378-48c2-8fe5-a6a38d9b62e2)

* Region(Option) : Target regions to be collected. Empty will be considered all regions (Collectors will scan all regions resources).
* AWS Access Key(Required) : Access Key from IAM. Read Only policy is strongly recommended.
* AWS Secret Key(Required) : Secret key from IAM.

#### aws\_assume\_role

![](https://402810733-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LzBJTlSpVTrcscLp2gb%2F-ME75OS2KciL1Xxcr7ds%2F-ME771dWX246-5wKlwx3%2F%E1%84%89%E1%85%B3%E1%84%8F%E1%85%B3%E1%84%85%E1%85%B5%E1%86%AB%E1%84%89%E1%85%A3%E1%86%BA%202020-08-07%20%E1%84%8B%E1%85%A9%E1%84%92%E1%85%AE%205.53.33.png?alt=media\&token=c12f64ca-9623-4c57-8de9-0bdb7f79e0c1)

* Region(Option) : Target regions to be collected. Empty will be considered all regions (Collectors will scan all regions resources).
* AWS Access Key(Required) : Access key from IAM to be assumed.
* AWS Secret Key(Required) : Secret key from IAM to be assumed.
* Role ARN(Required) : Role ARN of assume role from IAM.

### Selecting Project

Select the project to which the ***Service Account*** will be placed. Collected resources from that ***Service Account*** will be belongs to the projects automatically

![](https://402810733-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LzBJTlSpVTrcscLp2gb%2F-ME779tjv9PPKav7TsT0%2F-ME79ExZoF3zmUQNGdOA%2F%E1%84%89%E1%85%B3%E1%84%8F%E1%85%B3%E1%84%85%E1%85%B5%E1%86%AB%E1%84%89%E1%85%A3%E1%86%BA%202020-08-07%20%E1%84%8B%E1%85%A9%E1%84%92%E1%85%AE%206.02.19.png?alt=media\&token=f14f0458-be49-47d9-bcd9-8bebdbfd6f7d)

* To create ***Project***. By clicking ***+ Create Project ,*** new tab will be opened to create project.&#x20;
* To check detailed process about creating project, refer to following link.

{% content-ref url="../project/project-group-management" %}
[project-group-management](https://spaceone-dev.gitbook.io/user-guide/project/project-group-management)
{% endcontent-ref %}

* Select projects you need then click ***Save*** button.

## Deletion of Service Account /Changing Project&#x20;

User can delete Service Account or change project that was linked.

Select target ***Service Account***, then click ***Action > Delete/Change Project***

![](https://402810733-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LzBJTlSpVTrcscLp2gb%2F-ME7AKV5zSuEzMqRGW7K%2F-ME7CXXP-XkOxESTBTgB%2F%E1%84%89%E1%85%B3%E1%84%8F%E1%85%B3%E1%84%85%E1%85%B5%E1%86%AB%E1%84%89%E1%85%A3%E1%86%BA%202020-08-07%20%E1%84%8B%E1%85%A9%E1%84%92%E1%85%AE%206.17.37.png?alt=media\&token=eff6e955-b754-4efb-9f92-f5554ada2a43)

#### Deletion of Service Account

Enter name of Service Account, then click ***Confirm***

![](https://402810733-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LzBJTlSpVTrcscLp2gb%2F-ME7CoYpsi2zY8gahTKr%2F-ME7DRN0yyr-8gSZO03f%2F%E1%84%89%E1%85%B3%E1%84%8F%E1%85%B3%E1%84%85%E1%85%B5%E1%86%AB%E1%84%89%E1%85%A3%E1%86%BA%202020-08-07%20%E1%84%8B%E1%85%A9%E1%84%92%E1%85%AE%206.21.27.png?alt=media\&token=28b02610-3fb2-4608-a18e-5ba44e2905d3)

#### Changing Project

Like picture below, Select project to be changed then click ***Confirm.***

![](https://402810733-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LzBJTlSpVTrcscLp2gb%2F-ME7CoYpsi2zY8gahTKr%2F-ME7DiMz3WY0q1AlBVfy%2F%E1%84%89%E1%85%B3%E1%84%8F%E1%85%B3%E1%84%85%E1%85%B5%E1%86%AB%E1%84%89%E1%85%A3%E1%86%BA%202020-08-07%20%E1%84%8B%E1%85%A9%E1%84%92%E1%85%AE%206.22.47.png?alt=media\&token=0e4297c4-6795-49f8-a868-2b0fff83b03a)

## Link to AWS Console

Select target Service Account then, click ***Action > Console.***

User can move to AWS Console. User need to login to AWS Console previously(AWS Console SSO is not available)

## Detailed Status Tab

Using detailed status tab, Checking detailed parameter of ***Service Account*** or managing members are available.

#### Detail&#x20;

Detailed parameter of ***Service Account***.

![](https://402810733-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LzBJTlSpVTrcscLp2gb%2F-ME7G0F90kNMaal4d0J6%2F-ME7G9KLC2NZbPpJ9bvg%2F%E1%84%89%E1%85%B3%E1%84%8F%E1%85%B3%E1%84%85%E1%85%B5%E1%86%AB%E1%84%89%E1%85%A3%E1%86%BA%202020-08-07%20%E1%84%8B%E1%85%A9%E1%84%92%E1%85%AE%206.33.27.png?alt=media\&token=5fedec2d-4d9f-4659-ae20-9530737364b2)

#### Tag

By clicking ***Edit*** button, Tag for Service Accounts will be added or deleted.

![](https://402810733-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LzBJTlSpVTrcscLp2gb%2F-ME7NrgQqsDMN3qWOyeg%2F-ME7NtzM4aKBIVg1v_Dr%2F%E1%84%89%E1%85%B3%E1%84%8F%E1%85%B3%E1%84%85%E1%85%B5%E1%86%AB%E1%84%89%E1%85%A3%E1%86%BA%202020-08-07%20%E1%84%8B%E1%85%A9%E1%84%92%E1%85%AE%206.54.13.png?alt=media\&token=e3203465-b64e-4377-9995-20ff938c375b)

#### Credentials

Credentials that contains key information can be added/removed

#### &#x20;
