Carnegie Mellon University

Service Access

Service Access is provided through a Service Account. Service Accounts are non-user accounts that provide credentials for integrations or connections between servers or services.

You can use a Service Account to provide credentials to integrate or connect servers and services. For example: 

  • Use a Service Account to allow a web application to authenticate and connect to a database server
  • Use a Service Account to allow a cloud service to authenticate and then pull data from an API service 

Using a Service Account to connect servers or services provides many benefits. For example, Service Accounts:

  • Increase security by providing access only to the information and resources needed
  • Improve auditability by generating easily traceable transactions
  • Promote business continuity by separating Service Account activity from individual Andrew accounts
Complete the Service Account request form
  • A Service Account is to be used by a system or application not an individual. 
  • A Service Account should be used by a system to access data, run processes, or perform actions on the same or different system.
  • The Service Account sponsor is responible for all account-related questions and changes.
  • The Service Account sponsor will act as the primary contact for the account and be required to attest to the usage of the account on an annual basis.
  • What is accessed by the Service Account depends on permissions granted to the account.
  • Service Account credentials should not be shared directly with anyone, instead password management or password vaulting software should be used to securely store and share the credential with others.