This feature is in public preview and available only on Enterprise plans.
Once a service account is added at the organization-level, it can be added to a project. For more information, see Manage service accounts at the project-level.
Create a service account
You can create a service account in the Pinecone console:- Go to Settings > Access > Service accounts.
- Enter a Name for the service account.
- Choose an Organization Role for the service account. The role determines the service account’s permissions within Pinecone.
- Click Create.
-
Copy and save the Client secret in a secure place for future use.
You will not be able to see the client secret again after you close the dialog.
- Click Close.
Retrieve an access token
To access the Admin API, you must provide an access token to authenticate. Retrieve the access token using the client secret of a service account, which was provided at time of creation. You can retrieve an access token for a service account from thehttps://login.pinecone.io/oauth/token
endpoint, as shown in the following example:
curl
access_token
field, which you can use to authenticate with the Admin API.
Change a service account’s role
You can change a service account’s role in the Pinecone console:- Go to Settings > Access > Service accounts.
- In the row of the service account you want to update, click ellipsis (..) menu > Manage.
- Select an Organization role for the service account.
- Click Update.
Update service account name
You can change a service account’s name in the Pinecone console:- Go to Settings > Access > Service accounts.
- In the row of the service account you want to update, click ellipsis (..) menu > Manage.
- Enter a new Service account name.
- Click Update.
Rotate a service account’s secret
You can rotate a service account’s client secret in the Pinecone console:- Go to Settings > Access > Service accounts.
- In the row of the service account you want to update, click ellipsis (..) menu > Rotate secret.
- Enter the service account name to confirm.
- Click Rotate client secret.
-
Copy and save the Client secret in a secure place for future use.
You will not be able to see the client secret again after you close the dialog.
- Click Close.
Delete a service account
Deleting a service account will remove it from all projects and will disrupt any applications using it to access Pinecone. You delete a service account in the Pinecone console:- Go to Settings > Access > Service accounts.
- In the row of the service account you want to update, click ellipsis (..) menu > Delete.
- Enter the service account name to confirm.
- Click Delete service account.