Service Account Set Scope

Change a service account Control role; disabled accounts reject changes.

PUT https://id.test.globalbes.sg:9443/internal/control/v1/service-accounts/{service_account_id}/scope

Called byPlatform ops AuthService certificate

Path

service_account_id*

uuid

Identifier in the route.

Headers

X-BES-Operator

uuid

Optional acting person; malformed UUID is denied.

Body

request_ref*

string

Caller supplied idempotency reference, 1 to 255 characters.

product_id*

uuid

The product to bind the service account to.

control_role_id

uuid

Role to grant, or null to clear.

role_id

uuid

Product role. Required when changing a platform account to a product scope; must be an active role of that product. Omission retains an existing product role.

Request preview

PUT /internal/control/v1/service-accounts/{service_account_id}/scope

Response

Choose an API and send a request.

Caller tags:BOSSTenant adminAll productsMobile appMessagingControlAIAssistantPlatform opsLegacy productsCI release