Notifications
Clear all
Topic starter
12/06/2026 12:56 am
TL;DR: User licensing, activity visibility, and automated onboarding and offboarding are the focus of Freshservice integration, showing how ITSM platforms become easier to govern when access and profile changes are tied to lifecycle workflows, according to Zluri. The real issue is not convenience but whether identity, entitlement, and license controls stay aligned as users move, leave, or go dormant.
NHIMG editorial — based on content published by Zluri: Automation How Zluri Helps you Get More Out Of Freshservice ITSM Team
By the numbers:
- Only 20% have formal processes for offboarding and revoking API keys, and even fewer have procedures for rotating them.
- 96% of organisations store secrets outside of secrets managers in vulnerable locations including code, config files, and CI/CD tools.
- Only 5.7% of organisations have full visibility into their service accounts.
Questions worth separating out
Q: How should teams govern Freshservice automation without losing access control?
A: Treat Freshservice automation as part of the identity lifecycle, not as a standalone ITSM convenience layer.
Q: Why do ITSM platforms create non-human identity risk?
A: ITSM platforms create non-human identity risk because they often rely on API keys, service integrations, and privileged administrative workflows that can change access at scale.
Q: What breaks when offboarding is not tied to the source identity record?
A: When offboarding is disconnected from the source identity record, access can remain active in downstream systems even after employment ends.
Practitioner guidance
- Map Freshservice actions to lifecycle events Document which Freshservice operations create, modify, or remove identity state, then tie each one to an authoritative HR or IAM event before allowing automation.
- Treat the integration API key as a privileged NHI Store the Freshservice API credential in a secrets manager, assign ownership, rotate it on a defined schedule, and revoke it immediately when the integration is retired or suspected of misuse.
- Review licenses and entitlements together During access recertification, verify that active Freshservice licenses, group membership, and role assignments still match the user’s current function.
What's in the full article
Zluri's full blog covers the operational detail this post intentionally leaves for the source:
- Step-by-step Freshservice administration actions for agents, requesters, groups, and departments.
- The exact integration setup flow using the Freshservice API key and organisation name.
- Specific license-management examples showing how inactive users are identified and reallocated.
- Role and profile operations that determine how the automation behaves in day-to-day use.
👉 Read Zluri's automation guide for Freshservice ITSM and user lifecycle management →
Freshservice automation and ITSM access governance: what changes?
Explore further
12/06/2026 10:31 am
Freshservice automation is a lifecycle governance problem, not just an ITSM productivity feature. The article describes onboarding, profile updates, and offboarding as automated actions, which means the platform is participating in identity state changes. That makes it subject to the same lifecycle discipline that governs service accounts and other non-human identities. Practitioners should treat the ITSM layer as an identity control plane, not a workflow convenience layer.
A few things that frame the scale:
- Only 20% have formal processes for offboarding and revoking API keys, and even fewer have procedures for rotating them, according to Ultimate Guide to NHIs.
- A separate finding shows that 97% of NHIs carry excessive privileges, which broadens the attack surface and makes lifecycle discipline more than a cost-control exercise.
A question worth separating out:
Q: How do you know if Freshservice license optimisation is actually working?
A: You know it is working when licence assignment, account activity, and role need all move together over time. If inactive users keep licenses, or active users stay in the wrong groups, the optimisation is only financial, not governance-driven. Strong programmes measure entitlement accuracy, not just cost reduction.
👉 Read our full editorial: Freshservice automation exposes the governance gap in ITSM access
