Service accounts can be filtered by Client ID on HCC Console -> User Access -> Groups -> {group} -> Service accounts tab via API GET /groups/{uuid}/principals/?principal_type=service-account&principal_username=<your_filter_char(s)> create a group with at least 2 service account based principals check that service accounts are filtered correctly with value that contains   service-account-  prefix e.g.: full service account username  principal_username=service-account-77cfb7b0-ebaf-013c-5886-6aa2427b506a partial service account username  principal_username=service-account-77 the filtering is done based on the service account username stored in the database with value that doesn't contain this prefix e.g.: single-character filtering  principal_username=c multiple-character filtering  principal_username=cf the filtering is done based on the service account client id stored in the database note: the incorrect filtering was caused by using usernames to filter client ids and because service account username = 'service-account-' prefix + client ID , the results were sometimes correct and sometimes not