Service Access
Service Access is provided through a Service Account. Service Accounts are non-user accounts that provide credentials for integrations or connections between servers or services.
What can I do with a Service Account?
You can use a Service Account to provide credentials to integrate or connect servers and services. For example:
- Use a Service Account to allow a web application to authenticate and connect to a database server
- Use a Service Account to allow a cloud service to authenticate and then pull data from an API service
Why should I use Service Account?
Using a Service Account to connect servers or services provides many benefits. For example, Service Accounts:
- Increase security by providing access only to the information and resources needed
- Improve auditability by generating easily traceable transactions
- Promote business continuity by separating Service Account activity from individual Andrew accounts
How do I request a service account?
Complete the Service Account request form.
Service Account Guidelines
- A Service Account is to be used by a system or application not an individual.
- A Service Account should be used by a system to access data, run processes, or perform actions on the same or different system.
- The Service Account sponsor is responible for all account-related questions and changes.
- The Service Account sponsor will act as the primary contact for the account and be required to attest to the usage of the account on an annual basis.
- What is accessed by the Service Account depends on permissions granted to the account.
- Service Account credentials should not be shared directly with anyone, instead password management or password vaulting software should be used to securely store and share the credential with others.