Skip to main content
You need permission to manage service accounts in your Harness account, such as the Account Admin role.

​
Create a service account

A service account is a Harness identity that is not tied to a person, so the connection keeps working when people leave. The token’s access is exactly the roles you bind to this service account.

1

Open Administrative Settings

Sign in to your Harness account, then click the module menu icon next to the Harness logo and select Administrative Settings.

The Harness module menu open, with the menu icon and Administrative Settings highlighted
2

Open Account Settings

In the left navigation, click Account Settings.

The Admin Settings overview with Account Settings highlighted in the left navigation
3

Open Service Accounts

Select the Access Control tab, then click Service Accounts.

The Account Settings page on the Access Control tab, with Service Accounts highlighted
4

Create the service account

Click New Service Account and fill in the form.

  • Name: StackOne Integration
  • Harness fills in the Email from the name. Keep it or change it.
  • Click Save.
The New Service Account dialog with the Name and Email fields and the Save button highlighted

​
Assign roles

Bind roles that cover the data you want StackOne to read and manage. Without a role binding, the token cannot call any action.

1

Open role bindings

In the service account list, click Manage Role Bindings on the StackOne Integration row.

The service account list with the Manage Role Bindings button highlighted on the StackOne Integration row
2

Add a role and apply

Click Add, then choose a role and a resource group for the new row.

  • For Feature Management & Experimentation actions, select FME Administrator Role, or FME Manager Role for narrower access.
  • Add more rows if you also use the Harness user, user group, project, organization and invite actions.
  • Keep All Resources Including Child Scopes as the resource group unless you want to limit access.
  • Click Apply.
The Manage Role Bindings dialog with FME Administrator Role, All Resources Including Child Scopes and the Apply button highlighted

​
Generate the service account token

Tokens belong to an API key on the service account. Create the key, then generate a token from it.

1

Open the service account

Click StackOne Integration in the service account list to open it.

2

Create an API key

Under API Keys, click + API Key.

  • Name: StackOne Integration
  • Click Save.
The service account details page with the + API Key button highlighted
3

Create a token

On the new API key, click + Token and fill in the New Token dialog.

  • Name: StackOne Integration
  • Choose an Expiration. The connection stops working when the token expires, so pick a period that suits you.
  • Click Generate Token.
The New Token dialog with the Name field, the Expiration dropdown and the Generate Token button highlighted
4

Copy the token

Click the copy icon next to Value to copy the token, then click Close.

  • The token starts with sat..
  • The token value is only displayed once and cannot be retrieved later. Store it securely for use later.
  • Paste it into the Service Account Token field in StackOne Hub.
The generated token with its value hidden, and the copy icon and Close button highlighted

​
Linking the Account from the Hub

1

Navigate to the Hub

Use one of the three Linking Account Methods to access the Hub.
2

Fill out the fields

Fill out the following fields using details from your provider:
  • Service Account Token
3

Connect

  • Click Connect
  • If applicable, the provider will redirect you to a sign-in or authorization page. Complete the provider’s authorization flow.
  • Once authorization is successful, you will see a confirmation popup

If the account linking is successful, you will see the newly linked account in your Accounts page.