ServiceNow
Overview
ServiceNow provides service management software as a service, including IT services management (ITSM), IT operations management (ITOM), and IT business management (ITBM).
An accurate Configuration Management Database (CMDB) is crucial for your ITSM program. It can often be a single source of truth for tracking and managing IT assets. Axonius collects data across multiple adapters to perform CMDB Reconciliation and Remediation.
Asset Types Fetched
Cyber & Software Assets
Devices 
Users 
Software 
Roles 
Groups 
Tickets 
Compute Services 
Load Balancers
Databases 
Containers 
Object Storage 
Permissions 
Accounts & Tenants
SaaS Applications
Application Settings 
Business Applications 
SaaS Applications
➡️ Use this adapter (ServiceNow) to fetch updates to tickets that were created by Axonius Enforcement Actions, provided these tickets have not been deleted from Axonius.
➡️ Use the ServiceNow Tickets Fetch adapter, to fetch all tickets from:
- The incidents table
- Any additional tables
Data Retrieved from ServiceNow
Data retrieved from ServiceNow is highly customizable, as each deployment can vary greatly. By default, Axonius connects to the following tables and their child tables.
- cmdb_ci_computer
- cmdb_ci_vm
- cmdb_ci_vm_instance
- cmdb_ci_printer
- cmdb_ci_netgear
- u_cmdb_ci_computer_atm
- cmdb_ci_comm
- cmdb_ci_cluster
- cmdb_ci_cluster_vip
- cmdb_ci_facility_hardware
- cmdb_ci_msd
- sys_user
You can add or remove tables using the adapter Advanced Configuration settings.
Before You Begin
Authentication Methods
You can connect the adapter using either of the following authentication methods:
- Username/Password (Cyber & Software Assets only)
- OAuth with Client ID/Secret (Cyber & Software Assets, SaaS Applications, Identities, Enforcement Actions)
Required Permissions
The following roles and or permissions are required:
Roles:
- itil
- rest_api_explorer
- web_service_admin
Permissions:
read permission to the sys_audit_delete table
Roles:
- snc_read_only
Permissions:
read permission in the following tables:
- syslog_transaction
- sysevent_script_action
- sys_email_filter
- sys_dictionary
- sys_properties
- password_policy
- v_plugins
- sys_user
Permissions:
- ITIL Admin
The
snc_read_onlyrole includes an explicit ACL block that prevents
creating tickets in ServiceNow. If you plan to use both SaaS
Applications and Enforcement Actions with the same service account,
do not assignsnc_read_onlyto that account. Instead, use separate
service accounts — one withsnc_read_onlyfor SaaS Applications, and
one with ITIL Admin (withoutsnc_read_only) for Enforcement Actions.
Using multiple use cases with one service account?
If your service account needs to support both SaaS Applications and
Enforcement Actions, be aware that thesnc_read_onlyrole conflicts with
ticket creation.snc_read_onlyincludes an explicit ACL block that
prevents creating incidents and tickets, which are required for Enforcement
Actions.Recommended approach: Use two separate service accounts:
- One with
snc_read_onlyfor SaaS Applications- One with ITIL Admin (without
snc_read_only) for Enforcement Actions
APIs
Axonius uses the following APIs:
- Table API
- IRE API, if the 'Use IdentifyReconcile Discovery Source to create computer' setting is configured
Additional ServiceNow Pages
Deploying the ServiceNow Adapter
Configuring Delta Fetch in ServiceNow
ServiceNow Related Enforcement Actions
Related Enforcement Actions
Refer to the ServiceNow Related Enforcement Actions.
Updated 15 days ago