Is it necessary to create session object?

For external applications, you must create a Session object, if you do not have an Entity object . If you want to use the AdminSession object, the same rule applies.