# Service Accounts

### Creating a Service Account

Service accounts are associated with tokens to allow data transfer to external sites without being tied to a particular user.

To create a service account, go to "Settings" in the left hand menu and select "Members."

<img src="/files/zkBExXkoVVfYr0uMG4au" alt="" width="209">

Click the "Add new service account" button in the upper right.

**Note:** "Name" must not contain spaces or special characters.

<img src="/files/SD4K91z8OsuclLRRfrmD" alt="" width="338">

<img src="/files/U5d54BuwKF6xaFTbQ6WN" alt="" width="563">

Existing service accounts are viewable under the "Service Accounts" tab in the "Members" area.

<img src="/files/RVgRvEyUC5VEhuHga5pD" alt="" width="563">

&#x20;

### Creating New Tokens with Service Accounts

All new token creation will require the use of a service account. Follow the directions above to create an account if one does not exist.

To create a token, under "Settings" in the left-hand menu, select "Tokens."

<img src="/files/l7lMKJJjGeWQ0RgvbAb8" alt="" width="246">

Click the "Add Token" button in the upper right.

<img src="/files/RvXstCS3qGkTFrZ6cujF" alt="" width="222">

Fill in all fields, including selecting the appropriate service account. A public token cannot be created if no service account is selected.

<img src="/files/S4tFw3OkWrobKGevdBZH" alt="" width="563">

### Public Token vs Private Token

When creating a token, the option is given to make it a public or a private token. The difference between these choices is that a Private Token will always authenticate the request regardless of the domain of origin of the request. A Public Token will only authenticate API requests coming from whitelisted domains specified in the Domains attribute. We recommend using a Public Token for publicly-facing web pages so users do not gain unrestricted access to your organization's APIs.

All subdomains for use with Public Tokens must be specified explicitly (e.g. <https://subdomain1.yourwebpage.com/>, <https://subdomain2.yourwebpage.com/>). Public Tokens do not support wildcard characters (e.g. https\://\*.yourwebpage.com/).

### Transferring Token Ownership to a Service Account

Under "Settings" in the right-hand menu, select "Tokens"

<img src="/files/cmsMfiPSxsOStDv4tuGc" alt="" width="246">

From the list of existing tokens, right-click the token and select "Reassign Token".

<img src="/files/YJsxWDY2iDUY0wYPlg0O" alt="" width="563">

Tokens my only be reassigned to a **service account**. Follow the directions at the top of this page to create a service account if one does not exist.

<img src="/files/cKHLInEjdA20rbow3vgu" alt="" width="563">

NOTE:

Once all tokens are removed from association with a user, the user may be removed from the org by right-clicking on the user name in the "Members" tab inside the "Members" area.

<img src="/files/7pbbsBgdE3lKxGbAMMNH" alt="" width="392">

### Video

{% embed url="<https://www.youtube.com/embed/gf-WbDBoJyE?autoplay=0&cc_lang_pref=auto&cc_load_policy=0&controls=0&customControls=true&disablekb=1&enablejsapi=1&iv_load_policy=3&modestbranding=1&noCookie=false&origin=https://community.threekit.com&playsinline=1&rel=0&showinfo=0&widget_referrer=https://community.threekit.com/hc/en-us/articles/4405748696603&widgetid=1>" %}


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://community.threekit.com/platform-documentation/org-setup/admin-and-security/service-accounts.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.