Getting service account info
You can get information about a service account, such as its name and ID, creation and last authentication dates, and its roles in the folder.
-
In the management console, click or in the top panel and select the folder the service account belongs to.
-
From the list of services, select Identity and Access Management.
-
In the left-hand panel, select Service accounts.
-
In the list that opens, select the service account you need.
-
The Overview page will list the service account's parameters:
- ID of the service account as a string in
aje9sb6ffd2u********format. - Name.
- Date created.
- Date of last authentication.
- Roles in folder.
- ID of the service account as a string in
If you do not have the Yandex Cloud CLI yet, install and initialize it.
The folder used by default is the one specified when creating the CLI profile. To change the default folder, use the yc config set folder-id <folder_ID> command. You can also specify a different folder for any command using --folder-name or --folder-id. If you access a resource by its name, the search will be limited to the default folder. If you access a resource by its ID, the search will be global, i.e., through all folders based on access permissions.
Get a list of service accounts in the default folder:
yc iam service-account list
Result:
+----------------------+--------------+--------+---------------------+-----------------------+
| ID | NAME | LABELS | CREATED AT | LAST AUTHENTICATED AT |
+----------------------+--------------+--------+---------------------+-----------------------+
| ajeg2b2et02f******** | my-robot | | 2024-09-08 18:59:45 | 2025-02-18 10:10:00 |
| ajegtlf2q28a******** | account-name | | 2023-06-27 16:18:18 | 2025-02-18 10:20:00 |
+----------------------+--------------+--------+---------------------+-----------------------+
Get information about a service account using the get command:
yc iam service-account get <service_account_ID>
Result:
id: aje6o61dvog2********
folder_id: jbmsjns93hj8********
created_at: "2024-09-09T20:15:19Z"
name: service-account
last_authenticated_at: "2024-09-19T18:05:06Z"
Where:
id: Service account ID.folder_id: Folder ID.created_at: Service account creation date and time.name: service-account: Service account name.last_authenticated_at: Last authentication date and time.
-
Find out the ID of the folder where the service account was created.
-
Get information about the service accounts in the folder using the list REST API method for the ServiceAccount resource:
export FOLDER_ID=b1gvmob95yys******** export IAM_TOKEN=CggaATEVAgA... curl \ --header "Authorization: Bearer ${IAM_TOKEN}" \ "https://iam.api.cloud.yandex.net/iam/v1/serviceAccounts?folderId=${FOLDER_ID}"Result:
{ "serviceAccounts": [ { "id": "ajebqtreob2d********", "folderId": "b1gvmob95yys********", "createdAt": "2018-10-18T13:42:40Z", "name": "my-robot", "description": "my description" } ] }You can also get information about the service accounts in the folder using the ServiceAccountService/List gRPC API call.