# Create a Service Account

This article explains how to create a service account in the MSP Portal. Service accounts are scoped to a single MSP node and authenticate using an API key.

:::check Required Permissions
Only users with the **Add Service Account** permission can create new SAs
:::

:::tip[]
The API Key should be **rotated regularly** and stored **securely** using a Secrets Manager Service
:::

# Create a Service Account
:::info[]
Disabled permissions appear **greyed out** when creating or editing a service account.
:::
:::note[]
**This is the only time the secret will be visible!** Please store it in a secure location. If you lose the secret, you will need to generate a new one and update all integrations that used the old one.
:::
To create a non-interactive account for integrations or automated processes, follow the steps below:
<Tabs>
  <Tab title="MSP Portal">
    <Steps>
      <Step>
        Sign in to the **[WatchDog MSP Portal](https://app.watchdogsecurity.io/)**
      </Step>
      <Step>
        From the account context switcher, select the MSP Portal
      </Step>
      <Step>
        From the Left Hand Navigation Menu, select **Users**
      </Step>
      <Step>
        Click **Add → Add Service Account**.
      </Step>
       <Step>
        (Optional) Under **Node,** select the node the user belongs under
      </Step>
       <Step>
        Enter a **Service Account Name**.
      </Step>
       <Step>
        Enter a **Description**.
      </Step>
       <Step>
        Select the permissions to assign.
      </Step>
       <Step>
        Click **Create Service Account**.
      </Step>
    </Steps>
  </Tab>
</Tabs>

The service account is created immediately, and an API key is generated.