# Service Accounts

### Creating a Service Account

Service accounts are associated with tokens to allow data transfer to external sites without being tied to a particular user.

To create a service account, go to "Settings" in the left hand menu and select "Members."

![](https://2668731230-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fknvt0jlDBXmk91mWaWXB%2Fuploads%2FK5fAQdAOV0RvPHDHFEHk%2FScreen%20Shot%202021-06-30%20at%209.50.46%20AM.png?alt=media\&token=326f090a-1968-45d1-9f72-07253d4c319f)

Click the "Add new service account" button in the upper right.

**Note:** "Name" must not contain spaces or special characters.

![](https://2668731230-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fknvt0jlDBXmk91mWaWXB%2Fuploads%2FLaYprt2Kt7gsHNzrQQZz%2FScreen%20Shot%202021-06-30%20at%209.21.10%20AM.png?alt=media\&token=bf984480-db13-4e0a-b327-c11a0884b615)

![](https://2668731230-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fknvt0jlDBXmk91mWaWXB%2Fuploads%2FKqxcpRw02F6IbwXkadoo%2FScreen%20Shot%202021-06-30%20at%209.21.26%20AM.png?alt=media\&token=65633d4c-0342-4fc7-b104-09c2f51cc0a3)

Existing service accounts are viewable under the "Service Accounts" tab in the "Members" area.

![](https://2668731230-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fknvt0jlDBXmk91mWaWXB%2Fuploads%2FGSXEbxAglXsVTMFHU5Sz%2FScreen%20Shot%202021-06-30%20at%209.21.14%20AM.png?alt=media\&token=beea08f2-0fab-4ba8-986c-c9e32c695a3d)

 

### Creating New Tokens with Service Accounts

All new token creation will require the use of a service account. Follow the directions above to create an account if one does not exist.

To create a token, under "Settings" in the left-hand menu, select "Tokens."

![](https://2668731230-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fknvt0jlDBXmk91mWaWXB%2Fuploads%2F2hnCAOZKTTkoa0pOt2lm%2FScreen%20Shot%202021-06-30%20at%209.25.30%20AM.png?alt=media\&token=4b7aea9f-ecde-465a-ad27-f5ddf85340b7)

Click the "Add Token" button in the upper right.

![](https://2668731230-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fknvt0jlDBXmk91mWaWXB%2Fuploads%2F6JZ3sScCPZMOjsfGGxpR%2FScreen%20Shot%202021-06-30%20at%209.44.02%20AM.png?alt=media\&token=e288d0a4-2d68-4905-9806-28aa33670f97)

Fill in all fields, including selecting the appropriate service account. A public token cannot be created if no service account is selected.

![](https://2668731230-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fknvt0jlDBXmk91mWaWXB%2Fuploads%2F2xGG8wqe9H2djifnqDBC%2FScreen%20Shot%202021-06-30%20at%209.25.38%20AM.png?alt=media\&token=e0738c94-d039-4f3b-9694-24b30a20a5e0)

### Public Token vs Private Token

When creating a token, the option is given to make it a public or a private token. The difference between these choices is that a Private Token will always authenticate the request regardless of the domain of origin of the request. A Public Token will only authenticate API requests coming from whitelisted domains specified in the Domains attribute. We recommend using a Public Token for publicly-facing web pages so users do not gain unrestricted access to your organization's APIs.

All subdomains for use with Public Tokens must be specified explicitly (e.g. <https://subdomain1.yourwebpage.com/>, <https://subdomain2.yourwebpage.com/>). Public Tokens do not support wildcard characters (e.g. https\://\*.yourwebpage.com/).

### Transferring Token Ownership to a Service Account

Under "Settings" in the right-hand menu, select "Tokens"

![](https://2668731230-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fknvt0jlDBXmk91mWaWXB%2Fuploads%2FQ4VcvqPJMi7p6zGGaLtX%2FScreen%20Shot%202021-06-30%20at%209.25.30%20AM%20\(1\).png?alt=media\&token=04ced986-c004-4038-a2e0-20cd1eadf58b)

From the list of existing tokens, right-click the token and select "Reassign Token".

![](https://2668731230-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fknvt0jlDBXmk91mWaWXB%2Fuploads%2F9Lpf8WSGMS3ASx5o5RXa%2FScreen%20Shot%202021-06-30%20at%209.23.16%20AM.png?alt=media\&token=0658137c-840d-47fa-9387-b28ed33a6ab0)

Tokens my only be reassigned to a **service account**. Follow the directions at the top of this page to create a service account if one does not exist.

![](https://2668731230-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fknvt0jlDBXmk91mWaWXB%2Fuploads%2FCJ2pgHStWiKpembwuOSM%2FScreen%20Shot%202021-06-30%20at%209.47.54%20AM\(1\).png?alt=media\&token=e591e7ea-fa80-444b-b250-d03b7bd8a06d)

NOTE:

Once all tokens are removed from association with a user, the user may be removed from the org by right-clicking on the user name in the "Members" tab inside the "Members" area.

![](https://2668731230-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fknvt0jlDBXmk91mWaWXB%2Fuploads%2FBtHPBwPENFLLSQkYr2LK%2FScreen%20Shot%202021-06-30%20at%209.37.23%20AM\(1\).png?alt=media\&token=efc351e2-0217-485a-8242-d983388acf60)

### Video

{% embed url="<https://www.youtube.com/embed/gf-WbDBoJyE?autoplay=0&cc_lang_pref=auto&cc_load_policy=0&controls=0&customControls=true&disablekb=1&enablejsapi=1&iv_load_policy=3&modestbranding=1&noCookie=false&origin=https://community.threekit.com&playsinline=1&rel=0&showinfo=0&widget_referrer=https://community.threekit.com/hc/en-us/articles/4405748696603&widgetid=1>" %}