Permissions for a service account

Question

I'm trying to provision a service account for a third-party that would be able to create work items in a particular service desk project via Microsoft Power Automate. So far I've:

* Created Service Account
* Assigned a Jira Service Management License
* Created API token with 1 granular scope write:request:jira-service-management
* Added the service account to target service desk Project as a customer

Am I missing anything? I still cannot see the Project in Power Automate.

Marc -Devoteam- · Answer

Hi @Brandon Elie

Have you gone into user management and grated the user the agent role?

Have you used the correct API endpoint.

Service accounts use a scoped token, so yo need to use the https://api.atlassian.com endpoint.

See; https://support.atlassian.com/atlassian-account/docs/manage-api-tokens-for-your-atlassian-account/

Brandon Elie · Answer

Thanks, I given the service account the Service Desk Team role but I still can't select any project in the Power Automate action.

I'm starting to think this isn't possible with a service account?

I tried again with an API token with all Classic scopes and I still can't see any projects.

Then, I:

* created a new user account
* assigned a JSM license
* gave it a role on the project
* created an API token with no scopes and this works

This does not work with a scoped API token, however.

Marc -Devoteam- · Answer

Hi @Brandon Elie

A customer can't use API to create issues, so the service account should be granted agent permissions and have the role Service Desk Team.