Rest API user account

[Reneesh Kottakkalathil]

I'm looking for the best practises on creating an user account for REST API calls.

I got a request from my developer that they want to run RESTFUl API queries to search , create and update JIRA tickets. They also need an account to run the REST API calls.

As a jira administrator, what are the steps should I take to accomplish this?

We're using Active Directory for user authentication.
Should I create an AD account for the REST API authentication or Create an Internal jira account?

Appreciate if you could share your experiences on confiuring this.

[DPKJ]

You  need to consider two things and decide on trade-offs,

1. Having separate account for each service accessing Jira's rest API is best.
   • It will be helpful for you to control access, and
   • Manage activity logs etc.
2. Downside of separate account is,
   • Each rest account will count as user in your Jira account,
   • These rest users will appear in your user-picker drop downs.

[Michael Kuhl {Appfire}]

To add to @DPKJ's answer: 

Other advantages of using a separate user are:

• The scripts the developer creates will not depend on them remembering to update the password on the scripts when their personal password changes.
• Scheduled scripts will not suddenly fail if the developer leaves the company and their account is deactivated.

[Reneesh Kottakkalathil]

Thank you Both.

Could you please tell me if you used a local jira account or an active directory account?

[DPKJ]

I used local Jira account.

[Michael Kuhl {Appfire}]

I've used both.  It depends on the user management policy for the organization.