ServiceNow policy exception

ServiceNow Policy Exception is a formal authorization to deviate from an established policy within the platform. These exceptions are typically granted when there is a legitimate business need that justifies the deviation from standard procedures or security policies.

Integration Method: API

Tables: Ticket Inventory

Event Types: Tickets

DataBee connects to API endpoints to retrieve a list of compliance policy exceptions. This integration has been tested against ServiceNow version Utah.

ServiceNow Configuration

The scope is a mechanism to let an application request limited access to a user’s data. ServiceNow platform supports authentication scopes to allow admins to limit access of an OAuth client application to a specific REST API. 

Prerequisite Role required:   admin role to Create an OAuth API endpoint for external clients.

Navigate to System OAuth > Application Registry and then click New. On the "interceptor" page, click Create an OAuth API endpoint for external clients and  fill in the form.

For OAuth, the 'grant type' will be Password credentials, the scope will be useraccount , and the 'token URL' will be https://instance.service-now.com/oauth_token.do.

Creating a User

Prerequisite Role required to create user: user_admin

• Navigate to All > User Administration > Users.

• Select New

• On the form, fill in the fields with:

  • Time Zone field is set to “UTC” in order to get the UTC date in the API

  • Date format should be “System(yyyy-MM-dd)”.

  • Active checkbox. Ensure this is selected.

  • Set password for the user which will need for OAuth.

  • Locked out. Uncheck this box

  • Web service access. Check this box

Navigate to the Roles tab and click Edit to assign role to the user

Search for sn_compliance.reader role and select it. Click on save 

DataBee Configuration

1. Log into the DataBee console and navigate to the Data tab. Click Add New Data Source

   

2. Search and select ServiceNow Policy Exception

   

3. Click on API Ingest button

   

4. In the contact information, dialog boxes enter a name for the datasource and owner information

5. In the configuration dialog box, enter the following:

   • Authorization Method: OAuth2

   • Username / Password: Enter the API username/password created earlier.

   • Client Secret: Paste the Client Secret generated earlier

   • Client Key: Paste the Client ID generated earlier

   • Auth URL: https://<instance>.service-now.com/oauth_token.do

   • API URL:   https://<instance>.service-now.com/api/now/table/sn_compliance_policy_exception

   • Replace <instance> with your actual instance ID.

   

6. Click Submit