diff --git a/charts/tenant/templates/deployment.yaml b/charts/tenant/templates/deployment.yaml
index 13e934b..7883288 100644
--- a/charts/tenant/templates/deployment.yaml
+++ b/charts/tenant/templates/deployment.yaml
@@ -18,6 +18,7 @@ spec:
         app: jupyter
         tenant: 'tenant-{{.Values.name}}'
     spec:
+      serviceAccountName: 'tenant-{{ .Values.name }}-sa'
       imagePullSecrets:
         - name: registry-credentials
       containers:
diff --git a/charts/tenant/templates/serviceaccount.yaml b/charts/tenant/templates/serviceaccount.yaml
new file mode 100644
index 0000000..f3d6cd2
--- /dev/null
+++ b/charts/tenant/templates/serviceaccount.yaml
@@ -0,0 +1,8 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: 'tenant-{{ .Values.name }}-sa'
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: jupyter
+    app.kubernetes.io/tenant: 'tenant-{{ .Values.name | quote }}'