Hi I m brand new and just getting started with Prefect for t

Question

Hi I m brand new and just getting started with Prefect for the company I m working with Open Issue I m following the beginner s tutorial and the but am getting an `Unauthorized` error when trying to add a service account on See attached screenshots Is that because the account I m using is on the Free Plan

Kevin Kho · Answer

Hey < Open Issue Prefect Team 1> do you have admin credentials in this tenant Are you the only one in this tenant

Open-Issue Prefect Team 1 · Answer

I m the only one in it And when I look at the Team page I see that my role is Administrator

Kevin Kho · Answer

Will ask the team about this

Open-Issue Prefect Team 1 · Answer

I m not sure if this is relevant but when I follow the super basic steps in the tutorial I get this warning

Open-Issue Prefect Team 1 · Answer

```UserWarning Client was created with an API token configured for authentication API tokens are deprecated please use API keys instead ```

Open-Issue Prefect Team 1 · Answer

I ve got `~ prefect config toml` configured with ``` cloud auth token = lt TOKEN HERE gt ```

Open-Issue Prefect Team 1 · Answer

It s an API key so is `auth token` wrong

Kevin Kho · Answer

Oh about that for 0 15 0 we moved to keys rather than tokens so it should be ``` cloud api key = lt YOUR KEY gt ```

Open-Issue Prefect Team 1 · Answer

Ah ha That might be the root cause then I took that set up from this page <https cloud prefect io tutorial Universal Deploy authenticating with prefect cloud> So maybe that tutorial needs an update

Open-Issue Prefect Team 1 · Answer

I will try changing that and see if it works

Kevin Kho · Answer

Yeah probably The docs is <https docs prefect io orchestration concepts api keys html api keys|updated> here

Open-Issue Prefect Team 1 · Answer

Thanks for that By making that change I seem to no longer get that error Thank you for asking the team < Kevin Kho> because that `Unauthorized` problem seems to be unrelated

Kevin Kho · Answer

Yep that one I will ask about

Kevin Kho · Answer

Oh I tried it and I know what is going on now More granular permissions are an enterprise feature so you can t make Read Only accounts

Kevin Kho · Answer

I ll update that tutorial

Open-Issue Prefect Team 1 · Answer

Great thanks so much for your help with this < Kevin Kho> I this I understand now I get an unauthorized error if I use Role `User` or `Read only` It succeeded just now when I tried using Role `Administrator` So like you say you can t narrow down Service Account permissions unless you re on an Enterprise plan But you can create a Service Account

Kevin Kho · Answer

Yes that s exactly right

Open-Issue Prefect Team 1 · Answer

Not intuitive but makes sense now Yeah if you update the tutorial that would be helpful for other people avoiding this error in the future

Kevin Kho · Answer

Will be on it +1

Kevin Kho · Answer

Hey so I chatted with the team and I think we re gonna remove the tutorial there instead of updating it Not a lot of people use it and can consolidate it in the Docs The issue is <https github com PrefectHQ ui issues 997|here> if you want to keep track of it Also the options to create `User` and `Read Only` keys should not appear in your drop down on the free tier so that is a bug and we ll open another issue for it

Open-Issue Prefect Team 1 · Answer

Great support thank you so much

Open-Issue Prefect Team 1 · Answer

I just commented on the GitHub issue And thanks for filing the bug report about the `User` and `Read only` keys that should not appear on the free tier

Kevin Kho · Answer

That one is <https github com PrefectHQ ui issues 998|here> in case you wanna follow it