Skip to main content

​
Synopsis

kosli create service-account SERVICE-ACCOUNT-NAME [flags]
Create a service account. A service account is a non-human identity in your organization. API keys are created separately for it with kosli create api-key.

​
Flags

FlagDescription
-d, --description string[optional] A description for the service account.
-D, --dry-run[optional] Run in dry-run mode. When enabled, no data is sent to Kosli and the CLI exits with 0 exit code regardless of any errors.
-h, --helphelp for service-account
--privilege stringThe privilege granted to the service account. One of: [admin, member, snapshotter, reader].

​
Flags inherited from parent commands

FlagDescription
-a, --api-token stringThe Kosli API token.
-c, --config-file string[optional] The Kosli config file path. (default “kosli”)
--debug[optional] Print debug logs to stdout.
-H, --host string[defaulted] The Kosli endpoint. (default “https://app.kosli.com”)
--http-proxy string[optional] The HTTP proxy URL including protocol and port number. e.g. http://proxy-server-ip:proxy-port
-r, --max-api-retries int[defaulted] How many times should API calls be retried when the API host is not reachable. (default 3)
--org stringThe Kosli organization.
-q, --quiet[optional] Suppress non-critical warning messages. Errors and normal output are not affected. If both --quiet and --debug are set, --debug wins.

​
Examples Use Cases

These examples all assume that the flags --api-token, --org, --host, (and --flow, --trail when required), are set/provided. 
kosli create service-account yourServiceAccountName 
	--privilege member 
	--description "CI service account"
Last modified on June 29, 2026