Public APIs for creating non-human user accounts aka Service Accounts

[ubhatt]

Creating a non-human users aka Service Account is now possible with Flexera One. The new sets of public APIs are available to create and manage the Service Accounts. 

A service account is an account used by an application to access Flexera One APIs. Users calling Flexera One APIs should use a refresh token; for service account the Service Account Client should be used by machines/applications.

Service accounts, like users, must be assigned roles in an org to access resources within that org. Service accounts may only be assigned roles in the org they were created in, and therefore may only access resources in that org.

Applies to: All regions (NAM, EMEA, APAC)

How to user Service Accounts: 

• Refer to KB article. 
• Create a Service Account using Service Account create API https://developer.flexera.com/docs/api/iam/v1#/Service%20Account/Service%20Account%23Create
• Grant roles/permissions using Access Rule API https://developer.flexera.com/docs/api/iam/v1#/Access%20Rule 
• Create a Service Account Client https://developer.flexera.com/docs/api/iam/v1#/Service%20Account%20Client 
• The service account client consists of a clientID and clientSecret. These values should be stored securely for use by the customer application.

How to access Flexera One APIs using Service Account: 

• Get an access token by calling the token API - including the ClientID and clientSecret in the API call (the token API is described here)
• Make an API call to Flexera API, including the access token.
• When the access token expires, return to step 1.

Documentation

• List of Service Account APIs - https://developer.flexera.com/docs/api/iam/v1#/Service%20Account 
• List of Access Rule APIs - https://developer.flexera.com/docs/api/iam/v1#/Access%20Rule 

[ryanhardcastle0]

This is good news. Well done team.

[ubhatt]

Thank you @ryanhardcastle0 . The KB article is also posted.