---
sourceDocument: Australia API Reference
sourceDocumentLink: https://www.servicenow.com/docs/r/api-reference

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia API Reference

ft:clusterId :

    - crapiref

bundleId :

    - crapiref

workflow :

    - Creator


---

# Assign roles and create service accounts

# Assign roles and create service accounts {#ariaid-title1}

Release version: Australia  
Updated March 12, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Assign the sn_odbc_rest_access or sn_jdbc_rest_access role to users who need Live Connect access. You can assign these roles to personal user accounts or create dedicated non-interactive (Machine) service accounts.

## Before you begin

Role required: admin

## About this task

To enable Live Connect access for BI tools and analytics platforms, assign the sn_odbc_rest_access or sn_jdbc_rest_access role to personal user accounts or create dedicated service
accounts. You can create multiple service accounts for different use cases with appropriate roles and access levels. For example, one account might support finance reporting (ODBC, limited tables) while another supports analytics
(JDBC, broader dataset).

## Procedure

1. Navigate to AllUser AdministrationUsers.
2. Select New.
3. On the User form, fill in the following fields:  
   {#create-service-account__entry__2}

   | Field | Description |
   |-|-|
   | User ID | Unique identifier for this service account's login username. For example: odbc.user, jdbc.user, or sqlapi.user. |
   | First name | Optional for service account. |
   | Last name | Optional for service account. |
   | Identity Type | For service accounts, select Machine from the drop-down list. This designates the account as a non-interactive user, meaning it can only connect to ServiceNow from an API protocol. For personal user accounts via OAuth, leave this as the default value. |
   | Password needs reset | * Service accounts: Leave this check box cleared. To set a password for this service account, save the record first, then in the list view double-select the Password field for this account and enter the password. * Personal accounts: Leave this check box cleared (password is managed by the user). {#create-service-account__ul_flk_ssz_hkc} |
   [Table 1. User form]

   Don't change any other settings.  
   Note:  
   Non-interactive (Machine) users can't complete MFA challenges. Confirm that MFA is turned off for all Live Connect service accounts.
4. Select and hold (or right-click) the form header, and then select Save.
5. On the Roles tab, select Edit.  
   Assign one or both roles to this account. Consider creating separate accounts when different security policies or access levels apply.
6. In the Collection list, select one or more of the following roles and move them to the Roles list.  
   * To access data via the ODBC driver: sn_odbc_rest_access.
   * To access data via the JDBC driver: sn_jdbc_rest_access.
   * To turn off row and field-level checks: sn_live_connect_privileged_mode.
7. Select Save.

*[\>]: and then