Permissions for a service account

[Brandon Elie]

I'm trying to provision a service account for a third-party that would be able to create work items in a particular service desk project via Microsoft Power Automate. So far I've:

• Created Service Account
• Assigned a Jira Service Management License
• Created API token with 1 granular scope write:request:jira-service-management
• Added the service account to target service desk Project as a customer

Am I missing anything? I still cannot see the Project in Power Automate.

[Marc -Devoteam-]

Hi @Brandon Elie 

A customer can't use API to create issues, so the service account should be granted agent permissions and have the role Service Desk Team.

[Brandon Elie]

Thanks, I given the service account the Service Desk Team role but I still can't select any project in the Power Automate action.

I'm starting to think this isn't possible with a service account?

I tried again with an API token with all Classic scopes and I still can't see any projects.

Then, I:

• created a new user account
• assigned a JSM license
• gave it a role on the project
• created an API token with no scopes and this works

This does not work with a scoped API token, however.

[Marc -Devoteam-]

Hi @Brandon Elie 

Have you gone into user management and grated the user the agent role?

Have you used the correct API endpoint.

Service accounts use a scoped token, so yo need to use the https://api.atlassian.com endpoint.

See; https://support.atlassian.com/atlassian-account/docs/manage-api-tokens-for-your-atlassian-account/