---
title: "Update service account"
method: PUT
path: "/api/{org_id}/service_accounts/{email_id}"
tags: ["ServiceAccounts"]
---

# Update service account

`PUT /api/{org_id}/service_accounts/{email_id}`

## Request

- Base URL: `https://api.openobserve.ai` (the document declares no server; this is the origin it was published from)
- URL: `https://api.openobserve.ai/api/{org_id}/service_accounts/{email_id}`
- Auth: API key in header `Authorization`
- TypeScript: <https://skmtc.dev/openobserve/apis/openobserve-api-http/docs/api/:org_id/service_accounts/:email_id/put.ts> (a function with typed inputs; its response is checked against the schema)

Updates an existing service account's information such as first name and last name. You can also rotate the API token by adding the 'rotateToken=true' query parameter, which generates a new authentication token while invalidating the old one. This is useful for security maintenance and credential rotation policies.

## Path parameters

- `org_id` string, required
- `email_id` string, required

## Request body

- object
  - `first_name` string
  - `last_name` string

## Response `200`

Success

- union
  - APIToken
    - `token` string, required
    - `user` string, required
  - HttpResponse: HTTP response code 200 is success code 400 is error code 404 is not found code 500 is internal server error code 503 is service unavailable code >= 1000 is custom error code message is the message or error message
    - `code` integer, required
    - `error_detail` string, nullable
    - `hint` string, nullable: One-line guidance on how to fix the error (agent self-correction, D4).
    - `id` string, nullable
    - `message` string, required
    - `name` string, nullable
    - `suggestions` string[], nullable: Closest valid alternatives for a mistyped field/function name.
    - `trace_id` string, nullable
    - `warnings` string[], nullable: Problems with a request that succeeded anyway. Distinct from `hint`, which explains a failure: these accompany a 200, and the caller is entitled to have meant it.

---

[API](https://skmtc.dev/openobserve/apis/openobserve-api-http.md) - [All operations](https://skmtc.dev/openobserve/apis/openobserve-api-http/llms.txt) - [OpenAPI document](https://skmtc.dev/openobserve/apis/openobserve-api-http/revisions/0529b8a10252?raw)