서비스 계정 및 사용자 인증 정보를 반환합니다. setAccount를 호출하여 서비스 계정을 기업에 바인드할 수 있습니다. 서비스 계정은 이 기업 및 EMM에 고유하며 기업이 연결 해제되면 삭제됩니다. 사용자 인증 정보에는 비공개 키 데이터가 포함되며 서버 측에 저장되지 않습니다.
이 메서드는 Enterprises.Enroll 또는 Enterprises.CompleteSignup을 호출한 후, Enterprises.SetAccount를 호출하기 전에만 호출할 수 있습니다. 그 외의 경우에는 오류를 반환합니다.
첫 번째 호출 이후의 후속 호출은 새롭고 고유한 사용자 인증 정보 세트를 생성하고 이전에 생성된 사용자 인증 정보를 무효화합니다.
서비스 계정이 기업에 연결되면 serviceAccountKeys 리소스를 사용하여 관리할 수 있습니다.
.
요청
HTTP 요청
GET https://www.googleapis.com/androidenterprise/v1/enterprises/enterpriseId/serviceAccount
[null,null,["최종 업데이트: 2025-03-26(UTC)"],[[["\u003cp\u003eGenerates a service account and credentials that are unique to the enterprise and EMM and can be used for authentication.\u003c/p\u003e\n"],["\u003cp\u003eThe service account can be bound to the enterprise using the \u003ccode\u003esetAccount\u003c/code\u003e call and managed with the \u003ccode\u003eserviceAccountKeys\u003c/code\u003e resource.\u003c/p\u003e\n"],["\u003cp\u003eRequires prior enrollment or signup completion and executing this method invalidates previously generated credentials, issuing new ones.\u003c/p\u003e\n"],["\u003cp\u003eOnly specific key types (\u003ccode\u003egoogleCredentials\u003c/code\u003e or \u003ccode\u003epkcs12\u003c/code\u003e) are supported when requesting the service account.\u003c/p\u003e\n"],["\u003cp\u003eAuthorization with the \u003ccode\u003ehttps://www.googleapis.com/auth/androidenterprise\u003c/code\u003e scope is necessary for this request.\u003c/p\u003e\n"]]],[],null,["# Enterprises: getServiceAccount\n\n| **Note:** Requires [authorization](#auth).\n\nReturns a service account and credentials. The service account\ncan be bound to the enterprise by calling setAccount. The service account\nis unique to this enterprise and EMM, and will be deleted if the enterprise\nis unbound. The credentials contain private key data and are not stored\nserver-side.\n\n\u003cbr /\u003e\n\n\nThis method can only be called after calling\nEnterprises.Enroll or Enterprises.CompleteSignup, and before\nEnterprises.SetAccount; at other times it will return an error.\n\n\u003cbr /\u003e\n\n\nSubsequent calls after the first will generate a new, unique set of\ncredentials, and invalidate the previously generated credentials.\n\n\u003cbr /\u003e\n\n\nOnce the service account is bound to the enterprise, it can be managed\nusing the serviceAccountKeys resource.\n\n\u003cbr /\u003e\n\n\n\u003cbr /\u003e\n\n| **Note:** After you create a key, you might need to wait for 60 seconds or more before you perform another operation with the key. If you try to perform an operation with the key immediately after you create the key, and you receive an error, you can [retry\n| the request with exponential backoff](https://cloud.google.com/iam/docs/retry-strategy)\n\n\u003cbr /\u003e\n\n.\n\n\u003cbr /\u003e\n\nRequest\n-------\n\n### HTTP request\n\n```\nGET https://www.googleapis.com/androidenterprise/v1/enterprises/enterpriseId/serviceAccount\n```\n\n### Parameters\n\n| Parameter name | Value | Description |\n|----------------|----------|------------------------------------------------------------------------------------------------------------------------------------------------|\n| **Path parameters** |||\n| `enterpriseId` | `string` | The ID of the enterprise. |\n| **Optional query parameters** |||\n| `keyType` | `string` | The type of credential to return with the service account. Required. \u003cbr /\u003e \u003cbr /\u003e Acceptable values are: - \"`googleCredentials`\" - \"`pkcs12`\" |\n\n### Authorization\n\nThis request requires authorization with the following scope:\n\n| Scope |\n|-----------------------------------------------------|\n| `https://www.googleapis.com/auth/androidenterprise` |\n\nFor more information, see the [authentication and authorization](/android/work/play/emm-api/v1/how-tos/authorizing) page.\n\n### Request body\n\nDo not supply a request body with this method.\n\nResponse\n--------\n\nIf successful, this method returns a response body with the following structure:\n\n```text\n{\n \"kind\": \"androidenterprise#serviceAccount\",\n \"name\": string,\n \"key\": serviceaccountkeys Resource\n}\n```\n\n| Property name | Value | Description | Notes |\n|---------------|-----------------|---------------------------------------------------------------------------------------------------|-------|\n| `name` | `string` | The account name of the service account, in the form of an email address. Assigned by the server. | |\n| `key` | `nested object` | Credentials that can be used to authenticate as this ServiceAccount. | |\n| `kind` | `string` | | |"]]
