Is there a way to restrict access for an API Key to only one

Question

Is there a way to restrict access for an API Key to only one workspace

Kalise Richmond · Answer

Yes at the organization level you can create a service account and then associate it to a single workspace <https docs prefect io ui organizations query=service+account+ service accounts>

Ben Muller · Answer

pray

Ben Muller · Answer

< Kalise Richmond> now that I have a service account with only access to one workspace I need to set the `PREFECT API URL` env in my ECS environment How do I find out the user id part of the url ``

Ryan Peden · Answer

A quick way to find the URL is running `prefect cloud login` locally and after login run `prefect config view` to see the URL

Ben Muller · Answer

so I need to login to my service account

Kalise Richmond · Answer

Also I believe it s just the account ID not the user Id that you need after the ` accounts`

Ben Muller · Answer

yeah but you cant login to a service account so that is hard to obtain

Ryan Peden · Answer

Sorry Ben I missed where you mentioned it is a service account my mistake

Ben Muller · Answer

or is an account the organisation

Ben Muller · Answer

misleading if we are talking about Orgs Service accounts

Kalise Richmond · Answer

Account is the organization The URL at the top of the workspace on the flow runs dashboard should provide you with the account id and workspace id

Ben Muller · Answer

gotcha