Skip to main content
The Service Accounts page, accessible from the left-hand sidebar, lists all existing service accounts in rows, with each row displaying key information about the respective account. Selecting a service account opens a dedicated view for it, providing access to two sections: Details and Permissions.

Details

This section provides an overview of the service account and supports existing credential management. Use the Details section to:
  • View general information and details about the service account
  • Generate new credentials or add your own (for example, in JSON format)
  • Edit or disable existing credentials
Service account detail page showing general information with email, created by, created at, credential type, client ID, and description, plus a Credentials section with a Generate Private Key button

The service account Details section shows general information, credential type, and a prompt to generate a private key

Permissions

This section allows you configure granular Read and Write permissions per resource so the service account has only the access it needs for its integration. Use the Permissions section to:
  • View and edit Read or Write access for each permission group
  • Scope access so integrations can only read or write the resources you allow
Refer to the permissions reference for more details.
Service account Permissions page showing permission groups including BuildingsPublic, Actions, AreasPublic, DatasourcesPublic, DevicesPublic, MetersPublic, PointsPublic, SpacesPublic, TenantsPublic, TimeseriesPublic, and WorkOrdersPublic with green Read and orange Write permission badges

The Permissions section lists permission groups with color-coded Read and Write access indicators

Create a service account

You can create a service account directly from the Service Accounts page using the +Add Service button. Follow the steps outlined below to create a new service account.
You can manage a service account’s details and permissions once it has been created.
1

Open the Service Accounts page

Once inside Launchpad, navigate to the Service Accounts page located on the left-hand sidebar.
2

Click +Add Service

Once on Service Accounts, click the +Add Service button to create a new account.
3

Configure service account details

Complete the following fields for the new service account. The dialog provides fields for name, credential type, description, and site assignment.
Add New Service Account dialog with fields for name, credential type selection between Private JWT and Client Secret, description, and site selection, displayed over the Service Accounts table

The Add New Service Account dialog collects name, credential type, description, and site assignment

4

Save

Once you have configured the required details, click Save to create the service account.
5

Generate credentials

After you create the service account, generate the credentials based on the credential type you selected.
Select Generate Private Key on the service account detail page. Launchpad generates a key pair and downloads the private key file to your machine.
The private key file downloads only once. Store it in a secure location immediately. If you lose the key, you must generate a new one and update your integration.

Next steps

Keep the service account credentials in your integration. Grant only the scopes the job needs.

Permissions reference

Grant only the scopes your integration needs.
Last modified on August 18, 2026