kanidm service-account create helpdesk-bot "Helpdesk Bot"
kanidm group add-members idm_service_desk helpdesk-bot
kanidm service-account api-token generate helpdesk-bot "reset-tool"