Reproduce:

Request API service.update as Zabbix User with any correct properties.
?
Notice that result is serviceids.
You can make service.get to notice that IT service is updated.

NOTE: Zabbix user have no permission to configure IT service.