Public APIs for creating non-human user accounts aka Service Accounts

ubhatt · ‎Jul 06, 2023

Creating a non-human users aka Service Account is now possible with Flexera One. The new sets of public APIs are available to create and manage the Service Accounts.

A service account is an account used by an application to access Flexera One APIs. Users calling Flexera One APIs should use a refresh token; for service account the Service Account Client should be used by machines/applications.

Service accounts, like users, must be assigned roles in an org to access resources within that org. Service accounts may only be assigned roles in the org they were created in, and therefore may only access resources in that org.

Applies to: All regions (NAM, EMEA, APAC)

How to user Service Accounts:

Refer to KB article.
Create a Service Account using Service Account create API https://developer.flexera.com/docs/api/iam/v1#/Service%20Account/Service%20Account%23Create
Grant roles/permissions using Access Rule API https://developer.flexera.com/docs/api/iam/v1#/Access%20Rule
Create a Service Account Client https://developer.flexera.com/docs/api/iam/v1#/Service%20Account%20Client
The service account client consists of a clientID and clientSecret. These values should be stored securely for use by the customer application.

How to access Flexera One APIs using Service Account:

Get an access token by calling the token API - including the ClientID and clientSecret in the API call (the token API is described here)
Make an API call to Flexera API, including the access token.
When the access token expires, return to step 1.

Documentation

List of Service Account APIs - https://developer.flexera.com/docs/api/iam/v1#/Service%20Account
List of Access Rule APIs - https://developer.flexera.com/docs/api/iam/v1#/Access%20Rule