> ## Documentation Index
> Fetch the complete documentation index at: https://docs.nebius.com/llms.txt
> Use this file to discover all available pages before exploring further.

# How to authenticate as a service account

When a service account interacts with a resource in Nebius AI Cloud, IAM checks if it has access rights to perform the operation. Authenticated service accounts are given permissions based on their group memberships.

To authenticate in a service as a service account:

1. [Create a service account](./manage#create-a-service-account).

2. Create authentication keys for the service account:

   * [Authorized keys](./authorized-keys) to authenticate in the Nebius AI Cloud CLI or Terraform provider.
   * [Access keys](./access-keys) to authenticate in services with AWS-compatible APIs, such as Object Storage.

   Make sure you are in a [group](/iam/authorization/groups/index) that has the `admin` role within your tenant; for example, the default `admins` group. You can check this in the [Administration → IAM](https://console.nebius.com/iam) section of the web console.

3. Configure the interface that will use the created keys:
   * [Nebius AI Cloud CLI configuration](../../cli/configure)
   * [Terraform provider authentication](../../terraform-provider/authentication)
   * [AWS CLI configuration](../../object-storage/quickstart)