Delete a service account

Delete a service account to permanently remove it and its credentials from automation orchestrator, such as when an integration is decommissioned. You cannot undo this action.

Before you begin

The service account you want to delete exists in the target project.
You have the service_account:delete permission or the project-admin role.

About this task

If you need to temporarily revoke access, disable the service account instead.

When you delete a service account, automation orchestrator also:

Rejects all tokens previously issued to the service account within seconds.
Permanently removes all credentials associated with the service account.
Removes all non-built-in role assignments for the service account.

Procedure

Send a DELETE request to the service account endpoint:
```
$ curl -X DELETE \
    -H "Authorization: Bearer access_token" \
    https://orchestrator_host/api/v1/service_accounts/service_account_id
```
Where:
- access_token is your personal access token or session token.
- service_account_id is the UUID of the service account.
- orchestrator_host is the hostname of your automation orchestrator instance.
The API returns a 204 No Content response with no body.

Check that the service account is no longer displayed in list responses:

$ curl -H "Authorization: Bearer access_token" \
    https://orchestrator_host/api/v1/service_accounts