Authenticating as a service account
Learn how to authenticate in the CLI:
Service accounts are different from user accounts or federated user accounts. You cannot use service accounts to log in to the management console
Getting started
- Authenticate in the CLI as a user or a federated user.
- If you don't have a service account yet, create one and add it to a group to grant it permissions.
Authenticate as a service account
To authenticate as a service account:
-
Get a list of service accounts that exist in your cloud:
ncp iam service-account --folder-id <folder ID> list +----------------------+------------+ | ID | NAME | +----------------------+------------+ | aje3932acd0c5ur7dagp | default-sa | +----------------------+------------+
-
Create an authorized key for the service account and save it to the
key.json
file:ncp iam key create --service-account-name default-sa --output key.json --folder-id <folder ID> id: aje83v701b1un777sh40 service_account_id: aje3932acd0c5ur7dagp created_at: "2019-08-26T12:31:25Z" key_algorithm: RSA_2048
-
Add the service account authorized key to the CLI profile.
-
Create a new CLI profile:
ncp config profile create sa-profile
-
Add an authorized key:
ncp config set service-account-key key.json
-
-
Add the hostname and the port for sending requests to Nebius AI to the CLI profile:
ncp config set endpoint api.ai.nebius.cloud:443
-
Make sure that the service account parameters are added correctly:
-
Configure your profile to run commands.
Some commands require that you specify unique IDs for your cloud and folder. You can specify their details in the profile or use a specific flag for these commands.
-
Specify the cloud in your profile:
ncp config set cloud-id <cloud_ID>
Or run commands with the
--cloud-id
parameter. -
Specify a folder in the profile:
ncp config set folder-id <folder_ID>
Or run commands with the
--folder-id
parameter.
All operations in this profile will be performed on behalf of the linked service account. You can change the profile parameters or switch to another profile.
-