Service accounts

Service accounts are a way for organizations to provide manageable, controllable, and granular access to JetBrains Central Console to enable automations and services such as access to the Analytics API.

From an organizational perspective, service accounts let application and service integrations and automations use account credentials that are not tied to a specific user but are specifically created for the application or service. This prevents scenarios where automations or CI scripts lose access to JetBrains Central Console due to a user account being deleted or disabled, and their access credentials revoked.

Service accounts are created and managed by JetBrains Central Console users with appropriate permissions, who can perform all actions described below.

Service account usage costs

Service account usage consumes AI credits from the same organization-level credit pool as regular users. The consumption usually comes from background tasks, autonomous runs, or other similar implementations that run through service-account-based integrations. For actions initiated by a user, such as running a cloud task in Air, the AI credit consumption is attributed to the user who initiated the action.

Some JetBrains Central Console functionalities require a service account to work, but their usage is not charged in AI credits. For example, requests to the Analytics API do not consume AI credits as no LLM tokens are spent for API access and request processing.

Manage service accounts

Use the Service accounts page to add, update, or delete service accounts, assign and change permissions within service accounts, and copy account credentials.

Create a service account

In the sidebar, under Users and access, select Service accounts.
If you don't see this page, your role doesn't have the necessary permissions.
In the top-right corner, click Add service account.
In the dialog, enter the service account Name and Description.
Click Create service account.
Client ID and Client secret for the service account are displayed.
Copy the client secret as you won't be able to see it again.
You will use client ID and client secret to get an access token that will let you integrate your own applications or services with JetBrains Central Console.

View service account credentials

In the sidebar, under Users and access, select Service accounts.
If you don't see this page, your role doesn't have the necessary permissions.
Click the menu next to the account name and select View credentials.
A dialog opens, showing the Client ID and Client secret fields. To copy the client ID, click copy next to its value.
This dialog lets you copy only the client ID. You can only see and copy the client secret when you add a service account. If you no longer know the client secret for the service account, you can only rotate it. For more information, see Rotate the client secret.

Rotate the client secret

In the sidebar, under Users and access, select Service accounts.
If you don't see this page, your role doesn't have the necessary permissions.
Click the menu next to the account name and select View credentials.
A dialog opens, showing the Client ID and Client secret fields.
In the Client secret field, click Rotate secret.
A new client secret is generated and displayed. Copy the key as you won't be able to see it again.

Manage service account permissions

You can define permissions for service accounts by assigning or removing roles. Each role includes a set of permissions that defines the access rights and allowed actions.

In the sidebar, under Users and access, select Service accounts.
If you don't see this page, your role doesn't have the necessary permissions.
Сlick the menu next to the service account and select Change permissions.
The Change permissions dialog shows the roles assigned to the service account and the combined set of permissions this service account has based on these roles. When assigning a group-scoped role, select the groups to which the relevant permissions should apply. For example, a service account responsible for fetching your department's AI analytics should have a role allowing it to view AI analytics of several product development groups within your department.
- Assign a role by clicking Assign role and selecting a role from the list.
  To create a new role, select New role from the Assign role menu.
- Remove a role by clicking next to the role you want to remove.

To change permissions for multiple service accounts, select the checkboxes next to the service accounts, click Assign role at the bottom, and select the role you want to assign.

Rename a service account

In the sidebar, under Users and access, select Service accounts.
If you don't see this page, your role doesn't have the necessary permissions.
Click the menu next to the account name and select Edit account details.
The Service account details dialog opens.
In the dialog, enter the new service account Name. You can also change the account Description.
Click Save to confirm.

Delete service accounts

In the sidebar, under Users and access, select Service accounts.
If you don't see this page, your role doesn't have the necessary permissions.
Click the menu next to the account name and select Delete.
A confirmation dialog opens.
Click Delete.

To delete multiple service accounts, select the checkboxes next to the accounts, click Delete service accounts at the bottom of the screen, and confirm account deletion.

03 July 2026