Automation Deployment (User Account / Service Account)

[pae1]

Hello everyone,

I hope you're all having a great day. I have a question regarding the use of service accounts versus user accounts for running automation. In which scenarios should we allow users to run automation leveraging their own accounts, and in which cases should the solution be deployed using a Service Account? Which approach is more secure? Could you provide an overview of the best practices for the deployment of solutions? I feel that running everything via a service account might not be the best security practice, but I'm unsure where the line should be drawn between choosing a service account and when flows should run on a user account.

Thank you!

[Andrew_J]

@pae1 

I am no expert on this but from the reading I have done as I understand it when a user 01 creates the flow, that is controlled by them unless they share it with another user 02.  If user 01 was to leave and had not shared the flow with user 02 then the flow would continue running.  Or by the fact that Group Admin just goes and delets their account without knowing the flow is in place it might stop the business from running properly.

So would a service account be better, yes it would becasue you can get away from the above happening but depending on your organisations size then it could be quite difficult to control. 

I have seen a lot of post in here and try to help but some I wonder what they are trying to do, does the Global Admin know whatthay are doing. 

I am not sure if I have helped you, it would be good for some feedback.  Other will pipe in if thay have any concerns @creativeopinion.

Regards,

Andrew

[pae1]

Thank you Andrew for your answer. I will be installing the automation as a solution into a department dedicated environment. My concern is what should I use to install the solution. Would it be a service account or user who's running it. Also, since multiple users will be using the solution what type of connection should be used for the flow, would it be "Provided by run-only user" or a static connection referencing user who installed the solution? Please let me know what you think and which approach is more secure.