# tcld service-account command reference

> Service Account management operations

The `tcld service-account` command service Account management operations.

Alias: `sa`

- [tcld service-account create](#create)
- [tcld service-account create-scoped](#create-scoped)
- [tcld service-account list](#list)
- [tcld service-account get](#get)
- [tcld service-account update](#update)
- [tcld service-account delete](#delete)
- [tcld service-account set-account-role](#set-account-role)
- [tcld service-account set-namespace-permissions](#set-namespace-permissions)

### create

The `tcld service-account create` command create a service account.

Alias: `c`

#### --description

The service account description

Alias: `d`

#### --name

The service account name

Alias: `n`

#### --request-id

The request-id to use for the asynchronous operation, if not set the server will assign one (optional)

Alias: `r`

#### --account-role

The account role to set on the service account; valid types are: [Admin Developer FinanceAdmin MetricsRead Owner Read]

Alias: `ar`

#### --namespace-permission

Flag can be used multiple times; value must be "<namespace>=<permission>"; valid types are: [Admin Read Write]

Alias: `np`

### create-scoped

The `tcld service-account create-scoped` command create a scoped service account (service account restricted to a single namespace).

Alias: `cs`

#### --description

The service account description

Alias: `d`

#### --name

The service account name

Alias: `n`

#### --request-id

The request-id to use for the asynchronous operation, if not set the server will assign one (optional)

Alias: `r`

#### --namespace-permission

Value must be "<namespace>=<permission>"; valid types are: [Admin Read Write]

Alias: `np`

### list

The `tcld service-account list` command list service accounts.

Alias: `l`

#### --page-token

Page token for paging list service accounts request

Alias: `p`

#### --page-size

Page size for paging list service accounts request

Alias: `s`

### get

The `tcld service-account get` command get service account information.

Alias: `g`

#### --service-account-id

The service account id

Alias: `id`

### update

The `tcld service-account update` command update service account from Temporal Cloud.

Alias: `u`

#### --service-account-id

The service account id

Alias: `id`

#### --description

The service account description

Alias: `d`

#### --name

The service account name

Alias: `n`

#### --resource-version

The resource-version (etag) to update from, if not set the cli will use the latest (optional)

Alias: `v`

#### --request-id

The request-id to use for the asynchronous operation, if not set the server will assign one (optional)

Alias: `r`

### delete

The `tcld service-account delete` command delete service account from Temporal Cloud.

Alias: `d`

#### --service-account-id

The service account id

Alias: `id`

#### --resource-version

The resource-version (etag) to update from, if not set the cli will use the latest (optional)

Alias: `v`

#### --request-id

The request-id to use for the asynchronous operation, if not set the server will assign one (optional)

Alias: `r`

### set-account-role

The `tcld service-account set-account-role` command set account role for a service account.

Alias: `sar`

#### --service-account-id

The service account id

Alias: `id`

#### --request-id

The request-id to use for the asynchronous operation, if not set the server will assign one (optional)

Alias: `r`

#### --resource-version

The resource-version (etag) to update from, if not set the cli will use the latest (optional)

Alias: `v`

#### --account-role

The account role to set on the service account; valid types are: [Admin Developer FinanceAdmin MetricsRead Owner Read]

Alias: `ar`

### set-namespace-permissions

The `tcld service-account set-namespace-permissions` command set entirely new set of namespace permissions for a service account.

Alias: `snp`

#### --service-account-id

The service account id

Alias: `id`

#### --request-id

The request-id to use for the asynchronous operation, if not set the server will assign one (optional)

Alias: `r`

#### --resource-version

The resource-version (etag) to update from, if not set the cli will use the latest (optional)

Alias: `v`

#### --namespace-permission

Flag can be used multiple times; value must be "namespace=permission"; valid types are: [Admin Read Write]

Alias: `p`