nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Best Practices for Using Main JIRA Account for REST API and Maintenance

Julien Borrelli

Hi everyone,

Is it good practice to use the main JIRA account solely for REST API and maintenance purposes, while using a separate personal account for my activities as an admin, user, manager, etc.?

I would love to hear examples of how other small companies manage this and what is considered good practice.

I’ve found it very simple to use REST API with basic auth and the main account. It seems that ONLY the main account works for this, so it would make sense to separate the main account from everything else and not use it as an agent or a user.

Thanks for your insights!

Accepted answers

Rebekka Heilmann (viadee)

Hi @Julien Borrelli

what do you mean by "Main Account"?

All comments

Rebekka Heilmann (viadee)

Hi @Julien Borrelli

what do you mean by "Main Account"?

Julien Borrelli

The account which has initially created the site and projects

Rebekka Heilmann (viadee)

Right - the API Token respects the user's permission. If you need access to everything and anything per API and you are low on licenses, it makes sense to use one technical Account for all.

However, API Tokens respect the user's permissions. So from a security point of view it makes sense to have multiple accounts for multiple use cases and only give them permissions for what they really need. Having one account might imply that you need to share the API Token with multiple people. I wouldn't recommend that.

Whether it's a personal or technical Account makes no difference aside from a traceability standpoint. Again - a pro for having multiple accounts so you know you did what - even if you only have someone being responsible for a technical account.

So: It really depends on what you are doing specifically and how high your (or your company's) need for security is.

By the way: you can always change who's Org Admin, Billing and technical contact - so there isn't really a "Main Account" at least not in Atlassian speech.

Julien Borrelli

Thank you @Rebekka Heilmann _viadee_ , this is very helpful. We had an issue because we thought the "main" account needed to provide its own token to delegate API usage to another user. Thanks to your explanation, we now understand how it actually works. Cheers!

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

cloud

jira-cloud

jira-work-management

jira-service-management

jira-work-management-cloud