Skip to main content
When a service account interacts with a resource in Nebius AI Cloud, IAM checks if it has access rights to perform the operation. Authenticated service accounts are given permissions based on their group memberships.

Prerequisites

Make sure you are in a group that has the admin role within your tenant or project; for example, the default admins group. You can check this in the Administration → IAM section of the web console.

How to authenticate as a service account

To authenticate in a service as a service account:
  1. Create a service account.
  2. Create authentication keys for the service account:
    • Authorized keys to authenticate in the Nebius AI Cloud CLI or Terraform provider.
    • Access keys to authenticate in services with AWS-compatible APIs, such as Object Storage.
  3. Configure the interface that will use the created keys: