Is there a Jira System User that I can utilize for generic API abilities?

[Deleted user]

I have successfully connected my Jira instance to Microsoft Sentinel, where Sentinel uses my personal api key to generate a Jira ticket per every Microsoft Sentinel Incident automatically using Microsoft Logic Apps.

The downside to this, is every ticket that is generated has me assigned to the 'reporter' field.

I attempted to eliminate this issue by creating an organization API key, but my logic app did not accept that as an input. 

Does Jira have a system user that I can use to create an API key, to replace my personal api key?

[Oliver Siebenmarck _Polymetis Apps_ · Accepted solution]

Hi @[deleted] ,

Welcome to the community!

As @Rilwan Ahmed pointed out, there are no technical users in Jira Cloud, but you can create a normal user and designate that one as a technical/service user. I know quite a companies that do this. While it's cumbersome, it works ok.

However, there is another option, depending on where and how you need to use the REST API and whether you are open to using an app or not. Since a personal API token has all of the permissions on every cloud instance that that particular user has, you could end up with a lot of technical users or very powerful technical users.

To avoid this we have just launched API Token Manager for Jira, an app that lets you create time-limited API tokens that can be limited in scope by HTTP verb (GET/PUT/POST/DELETE) and by API endpoint. That gives you a lot more flexibility with token management and lets you create tokens that follow the principle of least privilege with API access. 

Hope that helps and please let us know how you solved it for your team!

Best regards,
 Oliver

[Deleted user]

Hey @Oliver Siebenmarck _Polymetis Apps_ , thanks for your input. I will look into API Token Manager when our business starts to grow more, right now we don't need limited API Tokens, but a single designated user for REST API calls. A generic service account. We were trying to avoid the fees of adding a new user, but we figured we were going to have to pay.

Its a little disappointing seeing all of the other competitors like Microsoft provide a service account without extra pay. Well, enough complaining, appreciate the help!!!

[Rilwan Ahmed · Accepted solution]

Hi @[deleted] ,

Welcome to the community !!

There is no option to create service users in Jira cloud. It is discussed in similar thread here: https://community.atlassian.com/t5/Jira-questions/how-do-you-create-a-service-account/qaq-p/883530 

Workaround 

1. I would suggest create a service user with email address in your AD/LDAP etc.
2. Invite that user to access the Jira cloud (Admin settings --> User Management --> Invite users). Make sure you have the access to the new user email inbox.
3. Grant required access to the invited user for Jira cloud. 
4. Logout from Jira where your login is used. Close all related tabs/windows. 
5. Copy the "Join the team" link received in the service user email inbox and paste it in the new incognito window or different browser.
   if you are not able to set password, use can't login/reset password. 
6. Now proceed with creating API token for the service user and apply changes in the integration. 

[Deleted user]

Hey @Rilwan Ahmed

Thanks so much for your answer and research. I guess I didn't scour the community answers hard enough! 

I was trying to avoid creating a new user because this concept is covered in most management tools, but I guess I have to bite the bullet and pay the man.

I appreciate all the effort you put into answering my question. Thank you Rilwan!

[Kevin Dickson]

I guess that this uses a Jira license though? So there's cost involved to create a system account.