# Service Accounts

### Creating a Service Account

Service accounts are associated with tokens to allow data transfer to external sites without being tied to a particular user.

To create a service account, go to "Settings" in the left hand menu and select "Members."

![](https://content.gitbook.com/content/efQOUWnh8WUpteoAKY9N/blobs/YGthoMrpr5hf1cxwhe6b/Screen%20Shot%202021-06-30%20at%209.50.46%20AM.png)

Click the "Add new service account" button in the upper right.

**Note:** "Name" must not contain spaces or special characters.

![](https://content.gitbook.com/content/efQOUWnh8WUpteoAKY9N/blobs/Yeiiqw9lqcNH0OmTv7hm/Screen%20Shot%202021-06-30%20at%209.21.10%20AM.png)

![](https://content.gitbook.com/content/efQOUWnh8WUpteoAKY9N/blobs/GX4M7tGif3IU1bbMspSP/Screen%20Shot%202021-06-30%20at%209.21.26%20AM.png)

Existing service accounts are viewable under the "Service Accounts" tab in the "Members" area.

![](https://content.gitbook.com/content/efQOUWnh8WUpteoAKY9N/blobs/PKoXsTK5RwreTCMmkoet/Screen%20Shot%202021-06-30%20at%209.21.14%20AM.png)

&#x20;

### Creating New Tokens with Service Accounts

All new token creation will require the use of a service account. Follow the directions above to create an account if one does not exist.

To create a token, under "Settings" in the left-hand menu, select "Tokens."

![](https://content.gitbook.com/content/efQOUWnh8WUpteoAKY9N/blobs/IBK8ORwRZwTQ2CU12VfN/Screen%20Shot%202021-06-30%20at%209.25.30%20AM.png)

Click the "Add Token" button in the upper right.

![](https://content.gitbook.com/content/efQOUWnh8WUpteoAKY9N/blobs/3ksn8VdKuRZz50zCM9ik/Screen%20Shot%202021-06-30%20at%209.44.02%20AM.png)

Fill in all fields, including selecting the appropriate service account. A public token cannot be created if no service account is selected.

![](https://content.gitbook.com/content/efQOUWnh8WUpteoAKY9N/blobs/YUNQPwzQgYXq2ogL4Zyb/Screen%20Shot%202021-06-30%20at%209.25.38%20AM.png)

### Public Token vs Private Token

When creating a token, the option is given to make it a public or a private token. The difference between these choices is that a Private Token will always authenticate the request regardless of the domain of origin of the request. A Public Token will only authenticate API requests coming from whitelisted domains specified in the Domains attribute. We recommend using a Public Token for publicly-facing web pages so users do not gain unrestricted access to your organization's APIs.

All subdomains for use with Public Tokens must be specified explicitly (e.g. <https://subdomain1.yourwebpage.com/>, <https://subdomain2.yourwebpage.com/>). Public Tokens do not support wildcard characters (e.g. https\://\*.yourwebpage.com/).

### Transferring Token Ownership to a Service Account

Under "Settings" in the right-hand menu, select "Tokens"

![](https://content.gitbook.com/content/efQOUWnh8WUpteoAKY9N/blobs/f3YRN3JCEkgRiPqdsixk/Screen%20Shot%202021-06-30%20at%209.25.30%20AM%20\(1\).png)

From the list of existing tokens, right-click the token and select "Reassign Token".

![](https://content.gitbook.com/content/efQOUWnh8WUpteoAKY9N/blobs/P0QWhHZFI0fmrd4rZOXB/Screen%20Shot%202021-06-30%20at%209.23.16%20AM.png)

Tokens my only be reassigned to a **service account**. Follow the directions at the top of this page to create a service account if one does not exist.

![](https://content.gitbook.com/content/efQOUWnh8WUpteoAKY9N/blobs/NVsVYazmFu2glTQZ7luU/Screen%20Shot%202021-06-30%20at%209.47.54%20AM\(1\).png)

NOTE:

Once all tokens are removed from association with a user, the user may be removed from the org by right-clicking on the user name in the "Members" tab inside the "Members" area.

![](https://content.gitbook.com/content/efQOUWnh8WUpteoAKY9N/blobs/HwJLmle2CfFQPpARAMwm/Screen%20Shot%202021-06-30%20at%209.37.23%20AM\(1\).png)

### Video

{% embed url="<https://www.youtube.com/embed/gf-WbDBoJyE?autoplay=0&cc_lang_pref=auto&cc_load_policy=0&controls=0&customControls=true&disablekb=1&enablejsapi=1&iv_load_policy=3&modestbranding=1&noCookie=false&origin=https://community.threekit.com&playsinline=1&rel=0&showinfo=0&widget_referrer=https://community.threekit.com/hc/en-us/articles/4405748696603&widgetid=1>" %}
