Get All Organization Service Accounts Assigned to One Project
On this page
- OAuth 2.0 authentication for programmatic access to Cloud Manager is available as a Preview feature.
- The feature and the corresponding documentation might change at any time during the Preview period. To use OAuth 2.0 authentication, create a service account to use in your requests to the Cloud Manager Public API.
Base URL: https://cloud.mongodb.com/api/public/v1.0
Resource
GET /groups/{PROJECT-ID}/serviceAccounts
Request Path Parameters
Name | Type | Description |
---|---|---|
| string | Unique identifier for the Project from which you want to retrieve its assigned Organization service accounts. Use the /groups endpoint to retrieve all Projects to which the authenticated user has access. |
Request Query Parameters
The following query parameters are optional:
Name | Type | Description | Default | ||||||
---|---|---|---|---|---|---|---|---|---|
pageNum | integer | Page number (1-index based). |
| ||||||
itemsPerPage | integer | Number of items to return per page, up to a maximum of 500. |
| ||||||
pretty | boolean | Indicates whether the response body should be in a prettyprint format. |
| ||||||
envelope | boolean | Indicates whether or not to wrap the response in an envelope. Some API clients cannot access the HTTP response headers or
status code. To remediate this, set For endpoints that return one result, response body includes:
For endpoints that return a list of results, the | None |
Request Body Parameters
This endpoint doesn't use HTTP request body parameters.
Response
Response Document
The response JSON document includes an array of result objects, an array of link objects and a count of the total number of result objects retrieved.
Name | Type | Description |
---|---|---|
| array | Array includes one object for each item detailed in the
|
| array | Array includes one or more links to sub-resources and/or related resources. The relations between URLs are explained in the Web Linking Specification. |
| number | Integer count of the total number of items in the result set. It may be greater than the number of objects in the results array if the entire result set is paginated. |
results
Embedded Document
Each result is one Project service account.
Name | Type | Description |
---|---|---|
| string | Unique identifier for the service account. |
| timestamp | Service account creation time. |
| string | Name of the service account. |
| string | Description of the service account. |
| string array | List of roles that the service account has in the project. Project roles include: |
| object array | List of service account secrets. |
| string | Unique 24-hexadecimal character string that identifies the secret. |
| timestamp | Timestamp representing secret creation time. |
| timestamp | Timestamp representing secret expiration time. |
| timestamp | Timestamp representing last secret usage. |
| string | Masked secret that only displays the prefix and last four characters. |
Example Request
Note
The user who makes the request can be formatted as {PUBLIC-KEY}:{PRIVATE-KEY}
.
1 curl --user "{PUBLIC-KEY}:{PRIVATE-KEY}" --digest \ 2 --header "Accept: application/json" \ 3 --include \ 4 --request GET "https://cloud.mongodb.com/api/public/v1.0/groups/{PROJECT-ID}/serviceAccounts?pretty=true"
Example Response
Response Header
401 Unauthorized Content-Type: application/json;charset=ISO-8859-1 Date: {dateInUnixFormat} WWW-Authenticate: Digest realm="MMS Public API", domain="", nonce="{nonce}", algorithm=MD5, op="auth", stale=false Content-Length: {requestLengthInBytes} Connection: keep-alive
200 OK Vary: Accept-Encoding Content-Type: application/json Strict-Transport-Security: max-age=300 Date: {dateInUnixFormat} Connection: keep-alive Content-Length: {requestLengthInBytes} X-MongoDB-Service-Version: gitHash={gitHash}; versionString={ApplicationVersion}
Response Body
1 { 2 "links": [ 3 { 4 "href": "https://cloud.mongodb.com/api/public/v1.0/groups/66ae30345fe4416479e39269/serviceAccounts?pretty=true&pageNum=1&itemsPerPage=100", 5 "rel": "self" 6 } 7 ], 8 "results": [ 9 { 10 "createdAt": "2024-08-03T14:02:40Z", 11 "description": "Service account for Cloud Manager users.", 12 "clientId": "mdb_sa_id_66ae38803cdf55582cb01144", 13 "name": "General Access", 14 "roles": ["GROUP_DATA_ACCESS_ADMIN", "GROUP_READ_ONLY"], 15 "secrets": [ 16 { 17 "createdAt": "2024-08-03T14:02:40Z", 18 "expiresAt": "2024-12-31T14:02:40Z", 19 "lastUsedAt" : "2024-08-24T21:10:35Z", 20 "id": "66ae38803cdf55582cb01143", 21 "maskedSecretValue": "mdb_sa_sk_...hcOL" 22 } 23 ] 24 }, 25 { 26 "createdAt": "2024-08-03T14:05:20Z", 27 "description": "Service account for read access.", 28 "clientId": "mdb_sa_id_66ae38803cdf55582cb01145", 29 "name": "Read Only Access", 30 "roles": ["GROUP_READ_ONLY"], 31 "secrets": [ 32 { 33 "createdAt": "2024-08-03T14:05:20Z", 34 "expiresAt": "2024-12-31T14:05:20Z", 35 "lastUsedAt" : "2024-08-24T21:10:35Z", 36 "id": "66ae38803cdf55582cb01146", 37 "maskedSecretValue": "mdb_sa_sk_...jcOP" 38 } 39 ] 40 }, 41 { 42 "createdAt": "2024-08-03T14:10:00Z", 43 "description": "Service account for data backup.", 44 "clientId": "mdb_sa_id_66ae38803cdf55582cb01147", 45 "name": "Backup Access", 46 "roles": ["GROUP_DATA_BACKUP_ADMIN"], 47 "secrets": [ 48 { 49 "createdAt": "2024-08-03T14:10:00Z", 50 "expiresAt": "2024-12-31T14:10:00Z", 51 "lastUsedAt" : "2024-08-24T21:10:35Z", 52 "id": "66ae38803cdf55582cb01148", 53 "maskedSecretValue": "mdb_sa_sk_...kcQR" 54 } 55 ] 56 } 57 ], 58 "totalCount": 3 59 }