app.service_accounts
TableRow level security on
Non-human members with their own audit identity (Settings, API keys and service accounts). Each is a sign-in, a person and a membership in its org holding one role; API keys attached to it act as it.
Primary key: id
| Column | Type | Nullable | Description |
|---|---|---|---|
| id | uuid | No | Primary key, UUID v7. |
| org_id | uuid | No | Owning org. A row never moves to another org.References app.organizations.id |
| name | text | No | Service account name, for example Ledger Export Bot. |
| owner_person_id | uuid | No | Person accountable for the service account.References app.people.id |
| expires_at | timestamp with time zone | Yes | When the service account stops working; null for no expiry. |
| user_id | uuid | No | Sign-in of the service account (auth.users). It has no password and never signs in interactively.References auth.users.id |
| person_id | uuid | No | Person row of the service account, the actor recorded in audit columns.References app.people.id |
| membership_id | uuid | No | Membership that carries the service account's role in the org.References app.memberships.id |
| created_at | timestamp with time zone | No | When the row was inserted. Set by the database. |
| created_by | uuid | Yes | Person who inserted the row, or null for a platform process. Set by the database.References app.people.id |
| updated_at | timestamp with time zone | No | When the row last changed. Set by the database. |
| updated_by | uuid | Yes | Person who last changed the row, or null for a platform process. Set by the database.References app.people.id |
| deleted_at | timestamp with time zone | Yes | Soft delete time. A row with deleted_at set is ignored by every access helper. |