{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":1251,"path":"api-reference/web-services/create-service-account.md","title":"Assign roles and create service accounts","bundle":null,"doc_type":null,"release":"australia","body":"\n# Assign roles and create service accounts\n\nAssign the **sn\\_odbc\\_rest\\_access** or **sn\\_jdbc\\_rest\\_access** role to users who need Live Connect access. You can assign these roles to personal user accounts or create dedicated non-interactive \\(Machine\\) service accounts.\n\n## Before you begin\n\nThe Live Connect plugin must be installed on your instance. See [Install Live Connect on your ServiceNow instance](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/api-reference/web-services/install-sql-api-plugin.md).\n\nRole required: admin\n\n## About this task\n\nTo enable Live Connect access for BI tools and analytics platforms, assign the **sn\\_odbc\\_rest\\_access** or **sn\\_jdbc\\_rest\\_access** role to personal user accounts or create dedicated service accounts. You can create multiple service accounts for different use cases with appropriate roles and access levels. For example, one account might support finance reporting \\(ODBC, limited tables\\) while another supports analytics \\(JDBC, broader dataset\\).\n\n## Procedure\n\n1.  Navigate to **All** &gt; **User Administration** &gt; **Users**.\n\n2.  Select **New**.\n\n3.  Complete the following fields on the User form.\n\n<table><thead><tr><th>\n\nField\n\n</th><th>\n\nDescription\n\n</th></tr></thead><tbody><tr><td>\n\nUser ID\n\n</td><td>\n\nUnique identifier for this service account's login username. For example: odbc.user, jdbc.user, or sqlapi.user.\n\n</td></tr><tr><td>\n\nFirst name\n\n</td><td>\n\nOptional for service account.\n\n</td></tr><tr><td>\n\nLast name\n\n</td><td>\n\nOptional for service account.\n\n</td></tr><tr><td>\n\nIdentity Type\n\n</td><td>\n\nFor service accounts, select **Machine** from the drop-down list. This designates the account as a non-interactive user, meaning it can only connect to ServiceNow from an API protocol. For personal user accounts via OAuth, leave this as the default value.\n\n</td></tr><tr><td>\n\nPassword needs reset\n\n</td><td>\n\n-   Service accounts: Leave this check box cleared. To set a password for this service account, save the record first, then in the list view double-select the **Password** field for this account and enter the password.\n-   Personal accounts: Leave this check box cleared \\(password is managed by the user\\).\n\n\n</td></tr></tbody>\n</table>    Don't change any other settings.\n\n    **Note:** Non-interactive \\(Machine\\) users can't complete MFA challenges. Confirm that MFA is turned off for all Live Connect service accounts.\n\n4.  Select and hold \\(or right-click\\) the form header, and then select **Save**.\n\n5.  On the **Roles** tab, select **Edit**.\n\n    Assign one or both roles to this account. Consider creating separate accounts when different security policies or access levels apply.\n\n6.  In the Collection list, select one or more of the following roles and move them to the Roles list.\n\n    -   To access data via the ODBC driver: **sn\\_odbc\\_rest\\_access**\n    -   To access data via the JDBC driver: **sn\\_jdbc\\_rest\\_access**\n    -   To turn off row and field-level checks: **sn\\_live\\_connect\\_privileged\\_mode**\n    -   For personal user accounts using basic authentication: **snc\\_basic\\_auth\\_api\\_access**\n7.  Select **Save**.\n\n\n**Parent Topic:**[Live Connect configuration on your ServiceNow instance](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/api-reference/web-services/configure-sql-api-overview.md)\n\n"}}