> ## Documentation Index > Fetch the complete documentation index at: https://docs.stackone.com/llms.txt > Use this file to discover all available pages before exploring further. # Connect Harness FME with Service Account Token – StackOne Hub > Link a Harness FME account in the StackOne Hub using Service Account Token. End-user guide to authorize the integration and start using Harness FME actions. You need permission to manage service accounts in your Harness account, such as the Account Admin role.

Create a service account

A service account is a Harness identity that is not tied to a person, so the connection keeps working when people leave. The token's access is exactly the roles you bind to this service account.

Sign in to your Harness account, then click the module menu icon next to the Harness logo and select Administrative Settings.

The Harness module menu open, with the menu icon and Administrative Settings highlighted

In the left navigation, click Account Settings.

The Admin Settings overview with Account Settings highlighted in the left navigation

Select the Access Control tab, then click Service Accounts.

The Account Settings page on the Access Control tab, with Service Accounts highlighted

Click New Service Account and fill in the form.

  • Name: `StackOne Integration`
  • Harness fills in the Email from the name. Keep it or change it.
  • Click Save.
The New Service Account dialog with the Name and Email fields and the Save button highlighted

Assign roles

Bind roles that cover the data you want StackOne to read and manage. Without a role binding, the token cannot call any action.

In the service account list, click Manage Role Bindings on the StackOne Integration row.

The service account list with the Manage Role Bindings button highlighted on the StackOne Integration row

Click Add, then choose a role and a resource group for the new row.

  • For Feature Management & Experimentation actions, select FME Administrator Role, or FME Manager Role for narrower access.
  • Add more rows if you also use the Harness user, user group, project, organization and invite actions.
  • Keep All Resources Including Child Scopes as the resource group unless you want to limit access.
  • Click Apply.
The Manage Role Bindings dialog with FME Administrator Role, All Resources Including Child Scopes and the Apply button highlighted

Generate the service account token

Tokens belong to an API key on the service account. Create the key, then generate a token from it.

Click StackOne Integration in the service account list to open it.

Under API Keys, click + API Key.

  • Name: `StackOne Integration`
  • Click Save.
The service account details page with the + API Key button highlighted

On the new API key, click + Token and fill in the New Token dialog.

  • Name: `StackOne Integration`
  • Choose an Expiration. The connection stops working when the token expires, so pick a period that suits you.
  • Click Generate Token.
The New Token dialog with the Name field, the Expiration dropdown and the Generate Token button highlighted

Click the copy icon next to Value to copy the token, then click Close.

  • The token starts with `sat.`.
  • The token value is only displayed once and cannot be retrieved later. Store it securely for use later.
  • Paste it into the Service Account Token field in StackOne Hub.
The generated token with its value hidden, and the copy icon and Close button highlighted

Linking the Account from the Hub

Use one of the three Linking Account Methods to access the Hub. Fill out the following fields using details from your provider:
  • Service Account Token
  • Click Connect
  • If applicable, the provider will redirect you to a sign-in or authorization page. Complete the provider's authorization flow.
  • Once authorization is successful, you will see a confirmation popup

If the account linking is successful, you will see the newly linked account in your Accounts page.

This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.