Separate service accounts connecting to App Broker's API

[a_cutler2]

A customer is having an issue where the AB service account in production is being locked because of mid-server ServiceNow issues, which is bringing App Broker down completely. One suggested solution is to have separate service accounts for each external system that consumes App Broker's api, rather than one service account for App Broker and the ServiceNow integration. Is this possible? And if so, would the only required step in App Broker be to grant admin REST API access to the additional service account(s) under Site Management? 

[CharlesW · Accepted solution]

You definitely want to use a different account for your basic auth profile in ServiceNow, otherwise you will likely have issues similar to what you are observing. The account that you use for the basic auth profile in ServiceNow does not require any special permissions, it can be a simple domain user account. The only requirement is that this account be added under the Rest API tab. No further permissions would be necessary in App Broker.