ERP Service Accounts: Ownership, Least Privilege and Secret Rotation
Build verifiable, traceable and explicitly owned controls for integration accounts, job accounts, ownership, access and secret rotation.
Learning objective
Deliver an operating baseline reviewable by business, technology and audit.
Roles
Business owners, data or integration leads, IT, security, consultants and audit
Prerequisites
- Scope, owners and test environment confirmed.
- Representative data and evidence templates available.
Completion checks
- End-to-end outcomes reconcile.
- Access, approval and log evidence is complete.
- Exceptions retain closure.
Common errors
- Testing only happy paths.
- Unclear ownership.
- No post-release review.
Thailand project note
Thailand requires aligned multilingual data, THB/foreign currency, Asia/Bangkok time, segregation and retention; regulated matters require current qualified Thai review.
Related modules
Steps
- 01
Inventory scope, sources, consumers and owners for integration accounts, job accounts, ownership, access and secret rotation.
- 02
Define fields, states, approval, timing, evidence and exception rules.
- 03
Separate request, execution, approval and review with least privilege.
- 04
Test normal, boundary, exception, reversal and duplicate cases in isolation.
- 05
Reconcile sources, downstream outcomes, logs, counts and needed control totals.
- 06
Record differences, decisions, workarounds, rollback and effective date.
- 07
Sample after release, close exceptions and update ownership and baseline.
Implementation notes
- Pilot one high-impact object.
- Give every exception an owner and due date.
References
- ERP 服务账号：所有权、最小权限与密钥轮换 ↗用友 · Accessed: 2026-08-21 · Applicable version: 官方公开能力或客户成功服务范围；实际配置依客户版本、许可和批准蓝图