fix: print extra steps when sa is created

pkg/cmd/serviceaccount/create/create.go

@@ -165,7 +165,10 @@ func runCreate(opts *options) error {
 		return fmt.Errorf("%v: %w", opts.localizer.MustLocalize("serviceAccount.common.error.couldNotSaveCredentialsFile"), err)
 	}
 
-	opts.Logger.Info(icon.SuccessPrefix(), opts.localizer.MustLocalize("serviceAccount.common.log.info.credentialsSaved", localize.NewEntry("FilePath", color.CodeSnippet(opts.filename))))
+	opts.Logger.Info(icon.SuccessPrefix(), opts.localizer.MustLocalize("serviceAccount.common.log.info.credentialsSaved",
+		localize.NewEntry("FilePath", color.CodeSnippet(opts.filename))),
+		localize.NewEntry("ClientID", color.Success(creds.ClientID)),
+	)
 
 	return nil
 }

pkg/localize/locales/en/cmd/serviceaccount.en.toml

@@ -41,7 +41,18 @@ other = 'you are forbidden to {{.Operation}} these service accounts'
 
 [serviceAccount.common.log.info.credentialsSaved]
 description = 'Credentials file saved message'
-one = 'Credentials saved to {{.FilePath}}'
+one = '''Credentials saved to {{.FilePath}}
+
+Next step is to enable specific access rules for your current services.
+To enable full access to produce consume Kafka messages execute:
+
+ $ rhoas kafka acl grant-access --producer --consumer --service-account {{.ClientID}} --topic all --group all
+
+To enable read and write access to Service Registry
+
+ $ rhoas service-registry role add --role DEVELOPER --service-account {{.ClientID}}
+
+'''
 
 [serviceAccount.common.input.credentialsFileLocation.message]
 description = 'Input message for credentials file location'