Delete user-managed service accounts

DELETE /_security/service/{namespace}/{service}

Delete a service account from a namespace of your own.

Deleting an account that still has service tokens is rejected unless force is true. A forced delete leaves the tokens behind: they cannot authenticate while no account of that name exists, and recreating the account is rejected until they are deleted.

Note

The elastic namespace is reserved for the built-in service accounts that ship with Elasticsearch. A name that no user-managed service account could have is rejected rather than reported as not found. The manage_service_account privilege does not authorize this API.

More about service accounts

Required authorization

Authentication

Api key

Authorization: <value>

Elasticsearch APIs support key-based authentication. You must create an API key and use the encoded value in the request header. For example:

		curl -X GET "${ES_URL}/_cat/indices?v=true" \
  -H "Authorization: ApiKey ${API_KEY}"

To get API keys, use the /_security/api_key APIs.

Basic

Authorization: Basic <credentials>

Bearer

Authorization: Bearer <token>

Elasticsearch APIs support the use of bearer tokens in the Authorization HTTP header to authenticate with the API. For examples, refer to Token-based authentication services

Request Console 1 / 6 languages

Console Kibana Dev Tools

DELETE /_security/service/my-namespace/my-service

JavaScript Elasticsearch JavaScript Client

const response = await client.security.deleteUserManagedServiceAccount({
  namespace: "my-namespace",
  service: "my-service",
});

Python Elasticsearch Python Client

resp = client.security.delete_user_managed_service_account(
    namespace="my-namespace",
    service="my-service",
)

curl Shell

curl -X DELETE "$ELASTICSEARCH_URL/_security/service/my-namespace/my-service" \
  -H "Authorization: ApiKey $ELASTIC_API_KEY"

PHP Elasticsearch PHP Client

$resp = $client->security()->deleteUserManagedServiceAccount([
    "namespace" => "my-namespace",
    "service" => "my-service",
]);

Ruby Elasticsearch Ruby Client

response = client.security.delete_user_managed_service_account(
  namespace: "my-namespace",
  service: "my-service"
)

Response

A successful response from DELETE /_security/service/my-namespace/my-service.

{
  "found": true
}

Delete user-managed service accounts

Required authorization

Authentication

Path parameters

Query parameters

Response