Delete user-managed service accounts

DELETE /_security/service/{namespace}/{service}

Delete a service account from a namespace of your own.

Deleting an account that still has service tokens is rejected unless force is true. A forced delete leaves the tokens behind: they cannot authenticate while no account of that name exists, and recreating the account is rejected until they are deleted.

NOTE: The elastic namespace is reserved for the built-in service accounts that ship with Elasticsearch. A name that no user-managed service account could have is rejected rather than reported as not found. The manage_service_account privilege does not authorize this API.

Required authorization

Cluster privileges: manage_security

More about service accounts

A successful response from DELETE /_security/service/my-namespace/my-service.

Request Console 1 / 6 languages

Console Kibana Dev Tools

DELETE /_security/service/my-namespace/my-service

JavaScript Elasticsearch JavaScript Client

const response = await client.security.deleteUserManagedServiceAccount({
  namespace: "my-namespace",
  service: "my-service",
});

Python Elasticsearch Python Client

resp = client.security.delete_user_managed_service_account(
    namespace="my-namespace",
    service="my-service",
)

curl Shell

curl -X DELETE "$ELASTICSEARCH_URL/_security/service/my-namespace/my-service" \
  -H "Authorization: ApiKey $ELASTIC_API_KEY"

PHP Elasticsearch PHP Client

$resp = $client->security()->deleteUserManagedServiceAccount([
    "namespace" => "my-namespace",
    "service" => "my-service",
]);

Ruby Elasticsearch Ruby Client

response = client.security.delete_user_managed_service_account(
  namespace: "my-namespace",
  service: "my-service"
)

Response

{
  "found": true
}

Delete user-managed service accounts

Required authorization

Path Parameters

Query Parameters

Response

Required authorization

Path Parameters { namespace , service , }

Query Parameters { refresh , force , }

Response

Path Parameters

Query Parameters