Enable programmatic API access with service accounts

Create service accounts to grant non-interactive clients, such as scripts or CI/CD pipelines, controlled access to the automation orchestrator API with scoped roles and credentials.

Service accounts are identities designed for automated processes rather than individual users. You assign roles to a service account to define what it can do, then generate client credentials for the service account to authenticate with the automation orchestrator API. Using service accounts instead of personal user credentials gives you fine-grained control over automated access and makes it easier to audit and rotate credentials without affecting user accounts.