Delete service account tokens

DELETE /_security/service/{namespace}/{service}/credential/token/{name}

Delete service account tokens for a service in a specified namespace. This route serves both kinds of service account, but the privileges differ: manage_service_account authorizes tokens of built-in accounts in the elastic namespace only, and tokens of a user-managed account require manage_security.

Important

On Serverless, non-operator users can delete tokens for only elastic/fleet-server and elastic/fleet-server-remote. Deleting tokens for any other service account requires operator privileges.

More about service accounts

Required authorization

Authentication

Api key

Authorization: <value>

Elasticsearch APIs support key-based authentication. You must create an API key and use the encoded value in the request header. For example:

		curl -X GET "${ES_URL}/_cat/indices?v=true" \
  -H "Authorization: ApiKey ${API_KEY}"

To get API keys, use the /_security/api_key APIs.

Basic

Authorization: Basic <credentials>

Bearer

Authorization: Bearer <token>

Elasticsearch APIs support the use of bearer tokens in the Authorization HTTP header to authenticate with the API. For examples, refer to Token-based authentication services

Request Console 1 / 8 languages

Console Kibana Dev Tools

DELETE /_security/service/elastic/fleet-server/credential/token/token42

JavaScript Elasticsearch JavaScript Client

const response = await client.security.deleteServiceToken({
  namespace: "elastic",
  service: "fleet-server",
  name: "token42",
});

Python Elasticsearch Python Client

resp = client.security.delete_service_token(
    namespace="elastic",
    service="fleet-server",
    name="token42",
)

curl Shell

curl -X DELETE "$ELASTICSEARCH_URL/_security/service/elastic/fleet-server/credential/token/token42" \
  -H "Authorization: ApiKey $ELASTIC_API_KEY"

Java Elasticsearch Java Client

client.security().deleteServiceToken(d -> d
    .name("token42")
    .namespace("elastic")
    .service("fleet-server")
);

C# Elasticsearch .NET Client

var response = await client.Security.DeleteServiceTokenAsync(@namespace: "elastic", service: "fleet-server", name: "token42");

PHP Elasticsearch PHP Client

$resp = $client->security()->deleteServiceToken([
    "namespace" => "elastic",
    "service" => "fleet-server",
    "name" => "token42",
]);

Ruby Elasticsearch Ruby Client

response = client.security.delete_service_token(
  namespace: "elastic",
  service: "fleet-server",
  name: "token42"
)

Response

A successful response from DELETE /_security/service/elastic/fleet-server/credential/token/token42.

{
  "found" : true
}

Delete service account tokens

Required authorization

Authentication

Path parameters

Query parameters

Response