Service account management

[theoephraim]

Use Case

I'd like to be able to provision new service accounts via the SDK. This would allow the creation of new service accounts that are short lived and have more limited access in a more dynamic nature. This would allow automated deployments to have their own limited credentials, or to introduce workflows for credential rotation.

Requirements and desired behavior

This would require the addition of new privileges for service accounts that allow them to manage other service accounts - which is not currently supported. I suppose if this option is enabled, the service account would be able to create new accounts with the same or less privileges as they have.

Additional information

No response