Skip to content

CLI reference — Service Accounts

Generated by bun run generate:cli-reference from spec/admin-api-openapi.json. Do not hand-edit — regenerate after refreshing the spec.

Every operation below is documented CLI-first (nayaone-admin api <operationId>) per PRD-407/DO-7. The REST /admin-api/* method+path is the fallback/alternative integration option.

7 operations in this area.

Create a service account (platform_admin)

CLI (preferred):

Terminal window
nayaone-admin api adminCreateServiceAccount --body '{}'

REST fallback: POST /admin-api/service-accounts

Soft-disable a service account (platform_admin)

CLI (preferred):

Terminal window
nayaone-admin api adminDisableServiceAccount --param id=<id> --body '{}'

REST fallback: POST /admin-api/service-accounts/{id}/disable

Get a service account by ID with grants (platform_admin)

CLI (preferred):

Terminal window
nayaone-admin api adminGetServiceAccount --param id=<id>

REST fallback: GET /admin-api/service-accounts/{id}

Grant an entitlement to a service account (platform_admin)

CLI (preferred):

Terminal window
nayaone-admin api adminGrantServiceAccountPermission --param id=<id> --body '{}'

REST fallback: POST /admin-api/service-accounts/{id}/grants

List all service accounts (platform_admin)

CLI (preferred):

Terminal window
nayaone-admin api adminListServiceAccounts

REST fallback: GET /admin-api/service-accounts

Mint a long-lived API key for a service account (platform_admin)

CLI (preferred):

Terminal window
nayaone-admin api adminMintServiceAccountApiKey --param id=<id> --body '{}'

REST fallback: POST /admin-api/service-accounts/{id}/api-keys

Revoke a service-account grant (platform_admin)

CLI (preferred):

Terminal window
nayaone-admin api adminRevokeServiceAccountGrant --param id=<id> --param grantId=<grantId> --body '{}'

REST fallback: POST /admin-api/service-accounts/{id}/grants/{grantId}/revoke