Account management
Use the Account Management endpoints to create subaccounts, manage emergency contact email addresses, and retrieve ACME contract reporting for subaccounts.
For an overview of the Partner Subscriptions API, see Partner Subscriptions API.
Why use it?
- Create a partner subscriptions subaccount with an API key.
- Retrieve emergency contact email addresses for the authenticated account.
- Add emergency contact email addresses to the authenticated account.
- Remove emergency contact email addresses from the authenticated account.
- Retrieve ACME contract reporting grouped by subaccount.
- Retrieve and update account settings, including the default auto-renewal behavior for new ACME contracts.
Resource URL
Use the Partner Subscriptions API account management resource URL to construct Account Management requests.
https://www.digicert.com/partner-subscription/api/v1/account/
Authentication
Account Management endpoints require authentication with a Partner Subscriptions API key.
Include this header in each request:
X-PARTNER-APIKEY: {{partner_api_key}}
Account hierarchy and API key scope
Account Management endpoints use the account scope of the Partner Subscriptions API key sent in the X-PARTNER-APIKEY header.
| Type | Capabilities / usage |
|---|---|
| Parent account | Can create subaccounts, manage emergency contact emails for the authenticated parent account, and retrieve ACME contract reporting across subaccounts. |
| Subaccount | Can manage emergency contact emails for the authenticated subaccount. Subaccounts cannot create subaccounts or access account reporting. |
| Parent account API key | Required to create subaccounts and retrieve account reporting. Can also be used to manage emergency contact emails for the authenticated parent account. |
| Subaccount API key | Used to manage emergency contact emails for the authenticated subaccount. |
403 Forbidden response. To create a subaccount or retrieve account reporting, use a parent account API key.Account settings
Use account settings to configure default behavior for the authenticated account.
The auto_renew_subscription setting controls the default auto-renewal behavior for new ACME contracts. When set to 1, new ACME contracts default to auto-renew enabled unless the create request explicitly sets auto_renew to false. When set to 0, new ACME contracts default to auto-renew disabled unless the create request explicitly sets auto_renew to true.
Emergency contact emails
Emergency contact emails are used for critical security issues or service disruptions.
Endpoints in this section
| Method | Endpoint | Description |
|---|---|---|
POST | /account/subaccount | Create a subaccount with an API key. |
GET | /account/emergency-emails | Get emergency contact email addresses for the authenticated account. |
PUT | /account/emergency-emails | Add emergency contact email addresses to the authenticated account. |
DELETE | /account/emergency-emails | Remove emergency contact email addresses from the authenticated account. |
GET | /account/reporting | Get ACME contract reporting grouped by subaccount. This endpoint is available only to parent accounts. Subaccounts receive a Only subaccounts with at least one ACME contract are included in the response. Subaccounts with no ACME contracts are omitted.403 Forbidden response. |
GET | /account/settings | List account settings for the authenticated account. |
PATCH | /account/settings | Update an account setting. |
POST /account/subaccount and GET /account/reporting endpoints require a parent account API key. Emergency contact email endpoints use the Partner Subscriptions API key for the authenticated account.Requests
All Account Management requests use RESTful URLs and header-based authentication. Where a request body is required, the endpoint accepts JSON data.
Methods
Account Management uses these standard HTTP methods:
GETPOSTPUTDELETE
Responses
Account Management responses return JSON data unless the endpoint returns 204 No Content.
Common response codes
| Status code | Description |
|---|---|
200 OK | Request succeeded and returned account management data. |
201 Created | Subaccount and API key created successfully. |
204 No Content | Emergency contact email update completed successfully. |
400 Bad Request | The request is invalid, an email address is invalid, no emergency emails are configured, or the request attempts to remove all emergency contact emails. |
403 Forbidden | Access denied. This can happen when the request uses the wrong Partner Subscriptions API key type. |