Bring your towel and join one of the fastest growing data communities. Welcome to our second-generation open source orchestration platform, a completely rethought approach to dataflow automation.

Prefect Community

Is there a way to restrict access for an API Key to only one workspace?

Yes, at the organization level you can create a service account and then associate it to a single workspace. <https://docs.prefect.io/ui/organizations/?query=service+account+#service-accounts>

<@U02HA1S5KCG> - now that I have a service account with only access to one workspace - I need to set the *`PREFECT_API_URL`* env in my ECS environment. How do I find out the user id part of the url ?

`<https://api.prefect.cloud/api/accounts/USER_ID/workspaces/WORKSPACE_ID>`

A quick way to find the URL is running `prefect cloud login` locally and after login, run `prefect config view` to see the URL.

so I need to login to my service account?

Also I believe it's just the account ID, not the user Id that you need after the `/accounts`

yeah but you cant login to a service account - so that is hard to obtain?

Sorry Ben - I missed where you mentioned it is a service account - my mistake.

misleading if we are talking about Orgs / Service accounts

Account is the organization. The URL at the top of the workspace on the flow runs dashboard  should provide you with the account id and workspace id