Delete service account tokens

DELETE /_security/service/{namespace}/{service}/credential/token/{name}

Delete service account tokens for a service in a specified namespace. This route serves both kinds of service account, but the privileges differ: manage_service_account authorizes tokens of built-in accounts in the elastic namespace only, and tokens of a user-managed account require manage_security.

IMPORTANT: On Serverless, non-operator users can delete tokens for only elastic/fleet-server and elastic/fleet-server-remote. Deleting tokens for any other service account requires operator privileges.

Required authorization

Cluster privileges: manage_service_account

More about service accounts

Path Parameters

Query Parameters

refresh enum Refresh: If true (the default) then refresh the affected shards to make this operation visible to search, if wait_for then wait for a refresh to make this operation visible to search, if false then do nothing with refreshes.; Values: true false wait_for

Response

application/json

Examples

A successful response from DELETE /_security/service/elastic/fleet-server/credential/token/token42.

Request Console 1 / 8 languages

Console Kibana Dev Tools

DELETE /_security/service/elastic/fleet-server/credential/token/token42

JavaScript Elasticsearch JavaScript Client

const response = await client.security.deleteServiceToken({
  namespace: "elastic",
  service: "fleet-server",
  name: "token42",
});

Python Elasticsearch Python Client

resp = client.security.delete_service_token(
    namespace="elastic",
    service="fleet-server",
    name="token42",
)

curl Shell

curl -X DELETE "$ELASTICSEARCH_URL/_security/service/elastic/fleet-server/credential/token/token42" \
  -H "Authorization: ApiKey $ELASTIC_API_KEY"

Java Elasticsearch Java Client

client.security().deleteServiceToken(d -> d
    .name("token42")
    .namespace("elastic")
    .service("fleet-server")
);

C# Elasticsearch .NET Client

var response = await client.Security.DeleteServiceTokenAsync(@namespace: "elastic", service: "fleet-server", name: "token42");

PHP Elasticsearch PHP Client

$resp = $client->security()->deleteServiceToken([
    "namespace" => "elastic",
    "service" => "fleet-server",
    "name" => "token42",
]);

Ruby Elasticsearch Ruby Client

response = client.security.delete_service_token(
  namespace: "elastic",
  service: "fleet-server",
  name: "token42"
)

Response

{
  "found" : true
}

Required authorization

Path Parameters { namespace , service , name , }

Query Parameters

Response

Path Parameters