---

To access any SBS service, you need access keys. Access keys are strings that you must provide in the x-api-key HTTP header of the request in order to be able to make API calls. For an example of how to generate and use a service access key, see the Tutorial: Send an Email.

Depending on the data you want to access (tenant-level, app-level, or even account-level), access keys can be of the following types:

1. Service access key (SAK) - This key is used to retrieve data at tenant level. More precisely, the bearer of the key can access API data for a specific app and for a specific tenant. Each key uniquely identifies a tenant-app combination. Consequently, in order to provide all your tenants with separate service access keys, you must generate a service access key for each tenant-app combination within your SBS account.
2. App-level service access key (ALSAK) - This key is required for scenarios when the key bearer need access to app-level data. As illustrated in the table below, there are certain services that provide or modify data at app-level, and consequently you must use an app-level access key in that case.
3. Account access key (AAK) - This key provides access exclusively to the Account API. The Account API enables you to perform programmatically the same SBS entity management actions that are available in the graphical user interface of the SBS Console. For example, such a key is useful if you have to create thousands of tenants (and their respective service access keys) and would like to do this programmatically.

Each key has a scope. Scope is a security mechanism which makes it possible to grant or deny access to various areas of the SBS API. You can set the scope to be as generic or as specific as needed by your business case. For example, when generating a service access key, you can limit its scope only to a specific service, or only to specific queries or mutations within a service. For more information, see Restrict access to services.

The following table lists the keys accepted by each service.

Category	Service	Access Keys
Account management	Account Service	Account access key
Account information	Usage Monitoring Service	Tenant-level service access key
Publishing	Document Rendering Service	Tenant-level service access key
	Email Service	Tenant-level service access key
	Localization Service	Tenant-level service access key
	WebSockets Service	Tenant-level service access key
Identity	OAuth 2.0 Service	Application-level service access key
	User Management Service	Application-level service access key
Storage	File Management Service	Tenant-level service access key
	Key-Value Service	Tenant-level service access key
Logging	Document Log Service	Tenant-level service access key
	Geolocation Service	Tenant-level service access key
	Process Audit Service	Tenant-level service access key
Information	Public Holidays Service	Tenant-level service access key, application-level service access key
	VAT Validator Service	Tenant-level service access key, application-level service access key
Romanian Tax Authority	Organizations Service	Tenant-level service access key
	RO ANAF OAuth Service	Tenant-level service access key
	RO E-Factura Service	Tenant-level service access key
	RO E-Transport Service	Tenant-level service access key
	Tax Declarations Service	Tenant-level service access key