Service Account (Dictionary Entry)

Quotes

Shared accounts, which are used by enterprise class software to run specific applications, and service accounts (“service IDs,” “nonhuman IDs”) that are used in scripts or application configuration files that communicate across applications and networks, often create significant challenges for organizations. Without adequate standards and guidance, these accounts introduce high risk to the organization. As depicted in Figure 15.4, a service ID (nonhuman ID) is a general term applied to a class of computing system accounts which are often not intended to be used by humans. Service IDs are used by nonhuman entities to access target resources.

Service accounts are specialized non-human privileged accounts typically used within operating systems to execute applications or other services so they can access data and network resources to perform specific tasks. Service accounts operate with associated privileges (or a defined account created during the installation of an application) that require certain local system privileges to function and/or to connect with other network resources. With this in mind, the operation of service accounts often requires elevated privileges and access to business-critical applications and data.

Bibliography

• https://open-measure.atlassian.net/wiki/spaces/BIB/pages/805273601

See Also