Give your automations a persona: Meet “Tech Bot”

Pick an avatar to use on all the Tech Bot accounts so your team recognizes it easily. (Photo by Ant Rozetsky on Unsplash)

Who owns the connection between your CRM and Slack? Or your project management tool and your ESP?

At most small organizations, someone might authorize an integration on the fly. It might become a critical workflow. If that person leaves, or gets hit by a bus, eventually something quietly stops working—and no one has the ability to repair it.

This is often a concern of mine; especially since I’m keen to prune user seats and licenses whenever I can. As the person often setting up integrations, I want to make sure I’m not the point of failure.

The fix is cheap: create a shared tech account, such as tech@yourorg.org, and give it access to every tool needed. It does three jobs: ownership of integrations, a recognizable name for automated work, and backup admin access.

I call it Tech Bot.

1. Authorization ownership

Many native integrations need an admin to approve an OAuth connection. Use the Tech Bot account whenever you can. The connection then survives staff turnover, because it is never tied to a user who might be deactivated or deleted. When someone leaves, you offboard them without breaking the workflow that connected your forms to your email platform.

In Zapier, each integration needs to have an OAuth approved by a user of that tool. Use a Tech Bot account here, or Zaps could fail if you delete the wrong account.

2. Automations

Automated tasks usually have to run as some user. When a workflow creates a task through the API, the “created by” field often shows whoever owns the key. If that user is the Tech Bot, two things get better:

  • Notifications can be delivered silently to the bot instead of landing in a person’s inbox.
  • Anyone who sees an item created by the bot knows right away that an automation made it, not a colleague.

That second point saves real time when you are debugging a duplicate task or a record that appeared from nowhere.

We have some custom HubSpot workflows that use the Asana API. When I changed the key to one owned by Tech Bot, my inbox thanked me.

In Slack, you could create automations with the Tech Bot persona — reminding staff to submit questions for a Town Hall; when expense reports are due; prompting discussions; sharing from a list of tech tips.

3. Admin access

If the one admin’s email is unavailable, someone else can still get in. Back the address with a shared inbox, not a personal mailbox, so password resets and verification emails reach whoever needs them. Treat it like a break-glass account: turn on multi-factor authentication, and keep a short list of who can open the inbox.

Many Slack integrations require custom Slack apps — and apps need Collaborators. Even Workflows built in the UI need managers.

Getting started

  1. Create the shared inbox and the Tech Bot account in your most critical tool.
  2. Move existing OAuth connections and API keys over to it, one tool at a time.
  3. Add it to each new tool as you adopt it.
  4. Pick an avatar to use on all the Tech Bot accounts so your team recognizes it easily.
  5. Keep a running list of where the account lives, and document how to get into the shared inbox.

An afternoon of setup removes a single point of failure you probably haven’t noticed.

Things to keep in mind

Here are some tips and also some concerns to weigh:

  • The shared inbox is the master key. It receives password resets for every tool, so whoever controls it can take over everything. Protect it harder than any single SaaS account: restrict membership, alert on sign-ins, and review access regularly.
  • MFA on a shared account is awkward. One “Pro” for an admin account is MFA; one Con is MFA. If the only admin leaves, and their MFA was a text code, the Tech Bot account is your back door. But if the tool requires MFA through a phone, the Tech Bot account becomes tied to a single user – the single point of failure we want to remove.
  • Shared accounts weaken the audit trail. You can’t tell which human did what. Auditors (SOC 2, for example) flag shared accounts unless there’s documented justification and access reviews. But that’s why you want to do as little possible with this account.
  • Vendor terms and cost. Some SaaS vendors prohibit shared or non-human logins, or bill each one as a paid seat. Check each tool’s terms before rolling it out.
  • Over-privileged integrations. If the bot is a full admin, OAuth connections it authorizes could inherit that power. Where a tool offers scoped service accounts or API tokens, those are better than a human-style admin login.
  • Silent notifications can go unread. Routing automation alerts to the bot is tidy, but failures need to reach a monitored channel or nobody will see them.
  • Offboarding. When someone with inbox access leaves, rotate the shared credentials, or the bot becomes a liability.
  • It’s not a substitute for two or more named admins per tool. Named admins come first, and the Tech Bot is the fallback.