Services
List Services
/api/orgs/{orgName}/servicesReturns all service accounts in an organization. Service accounts provide programmatic, non-human identities for accessing Pulumi Cloud resources. They can hold access tokens, belong to teams, and have stack permissions, making them suitable for CI/CD pipelines, automation tools, and other machine-to-machine integrations.
Request Parameters
orgNamestring path requiredThe organization name
Responses
- The list of services
- ↳
organizationNamestring requiredthe name of the organization this service belongs to - the owner of the service
- ↳
namestring requiredthe name of the service - ↳
descriptionstring requiredan optional description of the service - ↳
createdstring optionalthe time the service was create - a list of members that have access to the service
- ↳
itemCountSummarymap[string]integer requireditem types to their count within the service based on the current user’s permissions - an optional list of properties set on the service
continuationTokenstring optionalContinuationToken is an opaque value the client can send to fetch additional services. Will be nil once all services have been returned.
Create Service
/api/orgs/{orgName}/servicesCreates a new service account in an organization. Service accounts provide programmatic, non-human identities for accessing Pulumi Cloud resources. They are scoped to an organization and can hold access tokens, belong to teams, and have stack permissions. The service name must be unique within the organization.
Request Parameters
orgNamestring path requiredThe organization name
Request Body
ownerTypestring requiredthe service owner typeownerNamestring requiredthe service owner namenamestring requiredthe name of the servicedescriptionstring requiredan optional description of the service- an optional list of items to add during service creation
- ↳
typestring requiredthe type of the item to add - ↳
namestring requiredthe name (including any namespacing) of the item - an optional list of properties to set on the service
- ↳
keystring requiredthe name of the property - ↳
valuestring requiredthe value of the property - ↳
typestring requiredthe type of the property - ↳
orderinteger requiredthe position of the property
Responses
organizationNamestring requiredthe name of the organization this service belongs to- the owner of the service
- ↳
typestring requiredthe type of the member (e.g. team / user) - ↳
namestring requiredthe login name of the member within Pulumi - ↳
avatarUrlstring requiredan optional avatar URL for the member namestring requiredthe name of the servicedescriptionstring requiredan optional description of the servicecreatedstring optionalthe time the service was create- a list of members that have access to the service
- ↳
typestring requiredthe type of the member (e.g. team / user) - ↳
namestring requiredthe login name of the member within Pulumi - ↳
avatarUrlstring requiredan optional avatar URL for the member itemCountSummarymap[string]integer requireditem types to their count within the service based on the current user’s permissions- an optional list of properties set on the service
- ↳
keystring requiredthe name of the property - ↳
valuestring requiredthe value of the property - ↳
typestring requiredthe type of the property - ↳
orderinteger requiredthe position of the property
Get Service
/api/orgs/{orgName}/services/{ownerType}/{ownerName}/{serviceName}Returns the details of a specific service account, including its name, owner, description, team memberships, access tokens, and stack permissions. Service accounts provide programmatic, non-human access to Pulumi Cloud resources and are identified by their owner type, owner name, and service name.
Request Parameters
orgNamestring path requiredThe organization nameownerTypestring path requiredThe owner typeownerNamestring path requiredThe owner nameserviceNamestring path requiredThe service name
Responses
- The service details
- ↳
organizationNamestring requiredthe name of the organization this service belongs to - the owner of the service
- ↳
namestring requiredthe name of the service - ↳
descriptionstring requiredan optional description of the service - ↳
createdstring optionalthe time the service was create - a list of members that have access to the service
- ↳
itemCountSummarymap[string]integer requireditem types to their count within the service based on the current user’s permissions - an optional list of properties set on the service
- The list of service items
- ↳
organizationNamestring requiredthe name of the organization this item belongs to - ↳
typestring requiredthe type of the item - ↳
namestring requiredthe name (including any namespacing) of the item - ↳
versionstring optionaloptional field if the item has versioning - ↳
createdstring requiredtimestamp of when the item was created - when did the last update occur to this item, if any
- who added the item reference to the service - this will always be a user
- ↳
cloudCountinteger requiredhow many Pulumi cloud measured primitives are within this item continuationTokenstring optionalContinuationToken is an opaque value the client can send to fetch additional items. Will be nil once all items have been returned.
Update Service
/api/orgs/{orgName}/services/{ownerType}/{ownerName}/{serviceName}Updates the metadata and configuration of an existing service account, such as its description, team memberships, and access settings. Service accounts provide programmatic, non-human access to Pulumi Cloud resources.
Request Parameters
orgNamestring path requiredThe organization nameownerTypestring path requiredThe owner typeownerNamestring path requiredThe owner nameserviceNamestring path requiredThe service name
Request Body
namestring optionalthe name of the servicedescriptionstring optionalan optional description of the service- an optional list of properties to set on the service
- ↳
keystring requiredthe name of the property - ↳
valuestring requiredthe value of the property - ↳
typestring requiredthe type of the property - ↳
orderinteger requiredthe position of the property
Responses
organizationNamestring requiredthe name of the organization this service belongs to- the owner of the service
- ↳
typestring requiredthe type of the member (e.g. team / user) - ↳
namestring requiredthe login name of the member within Pulumi - ↳
avatarUrlstring requiredan optional avatar URL for the member namestring requiredthe name of the servicedescriptionstring requiredan optional description of the servicecreatedstring optionalthe time the service was create- a list of members that have access to the service
- ↳
typestring requiredthe type of the member (e.g. team / user) - ↳
namestring requiredthe login name of the member within Pulumi - ↳
avatarUrlstring requiredan optional avatar URL for the member itemCountSummarymap[string]integer requireditem types to their count within the service based on the current user’s permissions- an optional list of properties set on the service
- ↳
keystring requiredthe name of the property - ↳
valuestring requiredthe value of the property - ↳
typestring requiredthe type of the property - ↳
orderinteger requiredthe position of the property
Delete Service
/api/orgs/{orgName}/services/{ownerType}/{ownerName}/{serviceName}Deletes a service account from an organization. Service accounts provide programmatic, non-human access to Pulumi Cloud resources. If the service has other members, deletion requires explicit confirmation via the force parameter. All access tokens and permissions associated with the service are revoked.
Request Parameters
orgNamestring path requiredThe organization nameownerTypestring path requiredThe owner typeownerNamestring path requiredThe owner nameserviceNamestring path requiredThe service nameforceboolean query optionalForce deletion even if the service has other members
Responses
Head Service
/api/orgs/{orgName}/services/{ownerType}/{ownerName}/{serviceName}Checks whether a service account exists in the organization without returning its full details. Returns 204 No Content if the service exists, or an error if not found. This is a lightweight check useful for validating service account references.
Request Parameters
orgNamestring path requiredThe organization nameownerTypestring path requiredThe owner typeownerNamestring path requiredThe owner nameserviceNamestring path requiredThe service name
Responses
Add Service Items
/api/orgs/{orgName}/services/{ownerType}/{ownerName}/{serviceName}/itemsAdds items (such as access tokens, team memberships, or stack permissions) to an existing service account. Service accounts provide programmatic, non-human access to Pulumi Cloud resources and are scoped to an organization. Items define what the service account can access and what credentials it holds. Returns the updated service details.
Request Parameters
orgNamestring path requiredThe organization nameownerTypestring path requiredThe owner typeownerNamestring path requiredThe owner nameserviceNamestring path requiredThe service name
Request Body
- List of items
- ↳
typestring requiredthe type of the item to add - ↳
namestring requiredthe name (including any namespacing) of the item
Responses
- The service details
- ↳
organizationNamestring requiredthe name of the organization this service belongs to - the owner of the service
- ↳
namestring requiredthe name of the service - ↳
descriptionstring requiredan optional description of the service - ↳
createdstring optionalthe time the service was create - a list of members that have access to the service
- ↳
itemCountSummarymap[string]integer requireditem types to their count within the service based on the current user’s permissions - an optional list of properties set on the service
- The list of service items
- ↳
organizationNamestring requiredthe name of the organization this item belongs to - ↳
typestring requiredthe type of the item - ↳
namestring requiredthe name (including any namespacing) of the item - ↳
versionstring optionaloptional field if the item has versioning - ↳
createdstring requiredtimestamp of when the item was created - when did the last update occur to this item, if any
- who added the item reference to the service - this will always be a user
- ↳
cloudCountinteger requiredhow many Pulumi cloud measured primitives are within this item continuationTokenstring optionalContinuationToken is an opaque value the client can send to fetch additional items. Will be nil once all items have been returned.
Remove Service Item
/api/orgs/{orgName}/services/{ownerType}/{ownerName}/{serviceName}/items/{itemType}/{itemName}Removes a specific item (such as a team membership, access token, or stack permission) from a service account. Returns the updated service details after the item has been removed.
Request Parameters
orgNamestring path requiredThe organization nameownerTypestring path requiredThe owner typeownerNamestring path requiredThe owner nameserviceNamestring path requiredThe service nameitemTypestring path requiredThe item typeitemNamestring path requiredThe item name
Responses
- The service details
- ↳
organizationNamestring requiredthe name of the organization this service belongs to - the owner of the service
- ↳
namestring requiredthe name of the service - ↳
descriptionstring requiredan optional description of the service - ↳
createdstring optionalthe time the service was create - a list of members that have access to the service
- ↳
itemCountSummarymap[string]integer requireditem types to their count within the service based on the current user’s permissions - an optional list of properties set on the service
- The list of service items
- ↳
organizationNamestring requiredthe name of the organization this item belongs to - ↳
typestring requiredthe type of the item - ↳
namestring requiredthe name (including any namespacing) of the item - ↳
versionstring optionaloptional field if the item has versioning - ↳
createdstring requiredtimestamp of when the item was created - when did the last update occur to this item, if any
- who added the item reference to the service - this will always be a user
- ↳
cloudCountinteger requiredhow many Pulumi cloud measured primitives are within this item continuationTokenstring optionalContinuationToken is an opaque value the client can send to fetch additional items. Will be nil once all items have been returned.
Thank you for your feedback!
If you have a question about how to use Pulumi, reach out in Community Slack.
Open an issue on GitHub to report a problem or suggest an improvement.