Service Accounts for Service Graph Connector

[Jeff16]

I'm looking for best practices when implementing a Service Graph Connector.  To run the Scheduled Jobs, a Run As is required.  While the Admin account would work, I was interested in determining if a Service Account would be a better choice, and if so, what roles are required to implement this service account.  I'm looking to implement the following Service Graph Connectors:

- Service Graph Connector for Microsoft Azure

- Service Graph Connector for Microsoft Intune

[Tanushree Maiti]

Hi @Jeff16 

Here is Servicenow  recommended KB: KB2967707 Use dedicated service accounts instead of the built-in admin or guest user for scheduled j... 

A dedicated service account is strongly recommended over an admin account for running Service Graph Connector scheduled jobs to improve auditability, and isolate integration failures.

• • Prevents giving full system-wide administrative powers to an automated data stream.
  • Clearly distinguishes data updates and error logs triggered by Microsoft Azure and Intune imports from manual administrative changes.
  •  Limits potential security exposure if integration credentials or API tokens are ever compromised.