Skip to main content
When a service account interacts with a resource in Nebius AI Cloud, IAM checks if it has access rights to perform the operation. Authenticated service accounts are given permissions based on their group memberships. To authenticate in a service as a service account:
  1. Create a service account.
  2. Create authentication keys for the service account:
    • Authorized keys to authenticate in the Nebius AI Cloud CLI.
    • Access keys to authenticate in services with AWS-compatible APIs, such as Object Storage.
    Make sure you are in a group that has the admin role within your tenant; for example, the default admins group. You can check this in the Administration → IAM section of the web console.
  3. Add the created keys to the CLI configuration, as follows: