ServiceNow

🛑

DRAFT CONTENT: INTERNAL ONLY. DO NOT SHARE.

This page is for review only and content is not verified. Do not share externally; this is proprietary information.

Prerequisites

• Select Client Credentials Grant Type for your environment
• If glide.oauth.inbound.client.credential.grant_type.enabled system property exists and set to true, you can skip this step.
  Follow the instructions to enable it
  • Create the Client Credentials system property
  • Add the OAuth Application User
• A Security Administrator must create the connector

Configuration

1. Log in to your ServiceNow instance with administrator privileges.
2. You can configure the connector using one of the following methods. Both methods require you to create an OAuth API endpoint.

Option 1: Use update set

1. In Insights, select Update Set for installation method.
2. Download the update set.
3. Follow ServiceNow documentation, Save an update set as a local XML file, to apply the update set in your ServiceNow instance.

Option 2: Manual configuration

1. Navigate to System Security > Users and Groups > Roles.
2. Create a new role named bt_read_only.
3. Select the created bt_read_only role.
4. In the Contains Roles tab, select Edit.
5. Assign the following roles:
   • snc_read_only
   • sn_aia.viewer
   • fd_read
6. Navigate to System Security > Access Control (ACL).
7. Create additional rules granting read-only access for bt_read_only role to the following tables:
   • sys_user
   • sys_user_has_role
   • sys_user_group
   • sys_user_grmember
   • sys_group_has_role
   • sys_user_role
   • sys_audit
   • sys_audit_delete
   • syslog_transaction
   • sn_aia_team_member

Create an OAuth API endpoint

When creating an OAuth API endpoint, there are two workflows available:

• Creating a new inbound integration (Option 1)
  -or-
• Creating an API endpoint for external clients (Option 2)

To create the OAuth API endpoint:

1. Navigate to System Security > Users and Groups > Users.
2. Create the service account and fill in the following details:
   • User ID: BT-SP-Connector
   • First Name: BT-SP-Connector
3. Assign the bt_read_only role to the user.
4. Navigate to System OAuth > Application Registry.

Option 1: New inbound integration experience

1. Select New > New Inbound Integration Experience > New integration > OAuth - Client Credentials grant.
2. Fill in the following details:
   • Name: BT-SP-Connector
   • OAuth application user: BT-SP-Connector
3. Copy the Client ID and Client Secret.
4. Select Save.
5. In Insights, enter the Domain, Client ID, and Client Secret in the appropriate fields.

Option 2: OAuth API endpoint for external client

1. Select New > Create an OAuth API endpoint for external clients.
2. Fill in the following details:
   • Name: BT-SP-Connector
   • Client Type: Integration as a Service
   • Default Grant type: Client Credentials
   • OAuth Application User: bt-sp-connector
   • Auth Scope: useraccount
3. Select Submit.
4. Select the created BT-SP-Connector application.
5. Copy the Client ID and Client Secret.
6. In Insights, enter the Domain, Client ID, and Client Secret.