# Service Accounts

Service Accounts are specialized accounts that are not tied to a human user. They are used to authenticate API calls and can be scoped to specific MSP nodes. Permissions for Service Accounts are defined by the permissions they are assigned.

# **API Reference**
For detailed information on authenticating with Service Accounts and using API keys, refer to the API documentation:

<Card title="WatchDog API Reference" href="/api/reference" icon="lucide-code">
  This is how you use a card with an icon and a link. Clicking on this card
  brings you to the home page.
</Card>


This documentation covers:
  * Authenticating API requests using Service Account API keys
  * Supported endpoints and permissions

* * *

# Permissions Not Applicable to Service Accounts
:::note[]
Disabled permissions appear **greyed out** when creating or editing a service account.
:::
The following permissions are **disabled by design** and cannot be assigned to service accounts:
<AccordionGroup>
  <Accordion title="Service Accounts" defaultOpen>
    **Permission Key**| **Description**
    ---|---
    Add Service Account| Users with this permission can create service accounts 
    Modify Service Account| Users with this permission can modify service accounts 
    Rotate Service Account Secret| Users with this permission can rotate service account secret keys
    Delete Service Account| Users with this permission can delete service accounts
  </Accordion>
  <Accordion title="Managed Companies">
    **Permission Key**| **Description**
    ---|---
    Access Managed Company| Users with this permission can delete managed companies
    Access Managed Company (Read-Only)| Users with this permission can access **Managed Companies**
  </Accordion>
  <Accordion title="Additional Permissions">
    **Permission Key**| **Description** 
    ---|---
    Billing Administrator| Users with this permission can access the billing management page. (Parent Node Only).
  </Accordion>
</AccordionGroup>