Is it mandatory to provide Admin access to Service Account used for integration with ServiceNow?

Question

Dear Community,

We have a Integration requirement with ServiceNow. To send updates from ServiceNow to Jira we are using REST api and to send updates from Jira to ServiceNow there is Webhook we have used.

Now the problem we are facing is for this integration to work we have to give the Admin access to the Service Account user we are using. But security team does not agree with proving admin access for this Service Account user as it will be able to access all the modules.

Is there a way that we can control admin access so that integration Serive account user can only access (Read/write) required modules/tables in Jira?

If yes, how can we handle it?

If not, is it mandatory to provide admin access to Service Account for integration?

Note: We are using token from Jira, in our ServiceNow rest api as a password for the integration user(Service Account).

unknown · Answer

Hi @Syed Majid Hassan -Exalate-

Yes we have set it up ourselves. The requirement is whenever there is an update on ServiceNow end it should be pushed to Jira and vice a versa. If admin access is not provided the integration does not work it seems.

Thanks,

Yash

Diana_Architect_ZigiWave · Answer

@[deleted]hi! You do need admin access. But how did you make the integration? By yourself or using a tool? If you're willing to explore ways for connecting the two systems, feel free to take a look at ZigiOps. It's a no-code integration tool, that is fully customizable and establishes a bi-directional connection between the Jira and ServiceNow. It takes just a few clicks to integrate them. It reads schema dynamically and can transfer any fields. Take a look at it and even book a demo to see it in action.

Regards, Diana (Zigiwave team)

Syed Majid Hassan -Exalate- · Answer

Hi @[deleted]

This is Majid @ Exalate.

Can you tell me a little bit more about this integration please? Have you built it yourself using webhooks and REST API? If that is the case, why do you need to make the service account an administrator? Is it to execute the REST calls themselves?

If you are open to using a third party application to create this integration, please review our product Exalate which provides an OOTB bidirectional synchronization solution between Jira and ServiceNow. It is easy to setup and you can have your first integration running within minutes. You also get the added benefit of our team maintaining the product to cater for any API changes etc. that Jira or ServiceNow may come up with in the future. Sure, you will still need a service account to be able to use Exalate, but it would not need to be a full blown administrator.

Please feel free to book a demo if you would like to see the product in action.

Thanks

Majid