---
title: "Account management"
source_url: https://dev.digicert.com/partner-subscriptions-api/account-management.html
---

Use the Account Management endpoints to create subaccounts, manage emergency contact email addresses, and retrieve ACME contract reporting for subaccounts.

For an overview of the Partner Subscriptions API, see [Partner Subscriptions API](https://dev.digicert.com/md/partner-subscriptions-api.md).

## Why use it?

- Create a partner subscriptions subaccount with an API key.
- Retrieve emergency contact email addresses for the authenticated account.
- Add emergency contact email addresses to the authenticated account.
- Remove emergency contact email addresses from the authenticated account.
- Retrieve ACME contract reporting grouped by subaccount.
- Retrieve and update account settings, including the default auto-renewal behavior for new ACME contracts.

## Resource URL

Use the Partner Subscriptions API account management resource URL to construct Account Management requests.

```console
https://www.digicert.com/partner-subscription/api/v1/account/
```

## Authentication

Account Management endpoints require authentication with a Partner Subscriptions API key.

Include this header in each request:

```http
X-PARTNER-APIKEY: {{partner_api_key}}
```

## Account hierarchy and API key scope

Account Management endpoints use the account scope of the Partner Subscriptions API key sent in the `X-PARTNER-APIKEY` header.

<table>
<thead>
<tr>
<th>Type</th>
<th>Capabilities / usage</th>
</tr>
</thead>
<tbody>
<tr>
<td>Parent account</td>
<td>Can create subaccounts, manage emergency contact emails for the authenticated parent account, and retrieve ACME contract reporting across subaccounts.</td>
</tr>
<tr>
<td>Subaccount</td>
<td>Can manage emergency contact emails for the authenticated subaccount. Subaccounts cannot create subaccounts or access account reporting.</td>
</tr>
<tr>
<td>Parent account API key</td>
<td>Required to create subaccounts and retrieve account reporting. Can also be used to manage emergency contact emails for the authenticated parent account.</td>
</tr>
<tr>
<td>Subaccount API key</td>
<td>Used to manage emergency contact emails for the authenticated subaccount.</td>
</tr>
</tbody>
</table>


> **Warning**
>
> Using the wrong Partner Subscriptions API key type can result in a `403 Forbidden` response. To create a subaccount or retrieve account reporting, use a parent account API key.


## Account settings

Use account settings to configure default behavior for the authenticated account.

The `auto_renew_subscription` setting controls the default auto-renewal behavior for new ACME contracts. When set to `1`, new ACME contracts default to auto-renew enabled unless the create request explicitly sets `auto_renew` to `false`. When set to `0`, new ACME contracts default to auto-renew disabled unless the create request explicitly sets `auto_renew` to `true`.

## Emergency contact emails

Emergency contact emails are used for critical security issues or service disruptions.


> **Warning**
>
> At least one emergency contact email must remain configured. You cannot remove all emergency contact email addresses from an account.


## Endpoints in this section

<table>
<thead>
<tr>
<th>Method</th>
<th>Endpoint</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><code>POST</code></td>
<td><code>/account/subaccount</code></td>
<td>Create a subaccount with an API key.</td>
</tr>
<tr>
<td><code>GET</code></td>
<td><code>/account/emergency-emails</code></td>
<td>Get emergency contact email addresses for the authenticated account.</td>
</tr>
<tr>
<td><code>PUT</code></td>
<td><code>/account/emergency-emails</code></td>
<td>Add emergency contact email addresses to the authenticated account.</td>
</tr>
<tr>
<td><code>DELETE</code></td>
<td><code>/account/emergency-emails</code></td>
<td>Remove emergency contact email addresses from the authenticated account.</td>
</tr>
<tr>
<td><code>GET</code></td>
<td><code>/account/reporting</code></td>
<td>Get ACME contract reporting grouped by subaccount.

> **Info**
>
> This endpoint is available only to parent accounts. Subaccounts receive a `403 Forbidden` response.

Only subaccounts with at least one ACME contract are included in the response. Subaccounts with no ACME contracts are omitted.
</td>
</tr>
<tr>
<td><code>GET</code></td>
<td><code>/account/settings</code></td>
<td>List account settings for the authenticated account.</td>
</tr>
<tr>
<td><code>PATCH</code></td>
<td><code>/account/settings</code></td>
<td>Update an account setting.</td>
</tr>
</tbody>
</table>


> **Info**
>
> The `POST /account/subaccount` and `GET /account/reporting` endpoints require a parent account API key. Emergency contact email endpoints use the Partner Subscriptions API key for the authenticated account.


## Requests

All Account Management requests use RESTful URLs and header-based authentication. Where a request body is required, the endpoint accepts JSON data.

### Methods

Account Management uses these standard HTTP methods:

- `GET`
- `POST`
- `PUT`
- `DELETE`


## Responses

Account Management responses return JSON data unless the endpoint returns `204 No Content`.


> **Warning**
>
> Save the API key securely that appears in the response. The full API key value is displayed only once during creation.


### Common response codes

<table>
<thead>
<tr>
<th>Status code</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><code>200 OK</code></td>
<td>Request succeeded and returned account management data.</td>
</tr>
<tr>
<td><code>201 Created</code></td>
<td>Subaccount and API key created successfully.</td>
</tr>
<tr>
<td><code>204 No Content</code></td>
<td>Emergency contact email update completed successfully.</td>
</tr>
<tr>
<td><code>400 Bad Request</code></td>
<td>The request is invalid, an email address is invalid, no emergency emails are configured, or the request attempts to remove all emergency contact emails.</td>
</tr>
<tr>
<td><code>403 Forbidden</code></td>
<td>Access denied. This can happen when the request uses the wrong Partner Subscriptions API key type.</td>
</tr>
</tbody>
</table>

## In this section

- [List account settings](https://dev.digicert.com/md/partner-subscriptions-api/account-management/list-account-settings.md)
- [Update account setting](https://dev.digicert.com/md/partner-subscriptions-api/account-management/update-account-settings.md)
- [Create subaccount with API key](https://dev.digicert.com/md/partner-subscriptions-api/account-management/create-subaccount-with-api-key.md)
- [Get ACME contract reporting by subaccount](https://dev.digicert.com/md/partner-subscriptions-api/account-management/get-acme-contract-reporting-subaccount.md)
- [Add emergency contact emails](https://dev.digicert.com/md/partner-subscriptions-api/account-management/add-emergency-contact-emails.md)
- [List emergency contact emails](https://dev.digicert.com/md/partner-subscriptions-api/account-management/list-emergency-contact-emails.md)
- [Remove emergency contact emails](https://dev.digicert.com/md/partner-subscriptions-api/account-management/remove-emergency-contact-emails.md)