Investigate and remove the current dependency on Account Admin / all-resources scope for the ServiceNow integration's service account, so it can be scoped down (e.g., to the environment(s) it's actually used with) without breaking the change-request creation/approval flow, and ideally without requiring the account-admin role at all.