Since API keys can be used across tenants if linked to a user account, you may also pass a tenant:

https://docs-v1.prefect.io/orchestration/concepts/api.html#authenticating-the-client-with-cloud

What are the difference between "Tenants" and "Workspaces"? I might not fully understand those 2 keywords the right way

So i believe in the auth.toml file you add in your user creds and a user can be added to tenant

Do you have an example ? Because I cannot achieve that with the CLI. It will always override it and I can only have one set of credentials so far ...

err.... I meant that rather than added multiple user creds to your auth.toml, rather you would invite that single user to multiple tenants. I haven't tried using multiple user creds, so I am not srue on that one, but I can look into it/try it right now

rather you would invite that single user to multiple tenants

How is that achievable?

Typically when I invite someone I just log into cloud go to team and click invite. Then add their email associated with the account. That's probably the easiest way to do it

That's what I did but are the service_accounts (or api_keys) per tenant or global per user?

So I've never had issues with using the

prefect auth switch-tenants.

It should work if your user is invited to the tenant and you accept the invite. I think the tenant that you select is just the default tenant

the latter

hmmm... let me get back to you on this

thanks 🙏

Real quick could you try running

prefect auth login -k {proto-tenant key}

What is

{proto-tenant key}

?

yes

I now see the 3 of them even I only create an api_key for the staging one 🤔 Confusing

the reason why you need to specify a tenant is to associate that key with a tenant. You can change the default tenant by running

prefect auth switch-tenant

though. Try switching tenants now, it should work