Discovery of Azure Cloud Resources -VM

[AP_Akash_07]

Hi All ,

I have this question, like when performing discovery of azure cloud resources we create servicenow cloud discovery schedules. While creating those schedules there is one option to create schedules for VM as well .

So wanted to confirm ,discovering those resources via the VM schedule ,do they also need any credentials or port related access to discovery those devices .My schedule is running perfectly  and discovering all the related devices of the service account / subscriptions.

[pavani_paluri]

Hi @AP_Akash_07 ,

No, you don’t need any extra credentials or ports. ServiceNow talks directly to Azure using APIs. It uses the service account you already set up (Azure service principal). That’s enough to pull all the basic VM info (like name, OS, IP, region, etc.). It does not try to connect to the VM itself (so no need for SSH, WMI, or open ports).

But if you want more details from inside the VM (like software installed), then we would need to run extra discovery (called Horizontal Discovery).

Mark it helpful if this helps you to understand. Accept solution if this give you the answer you're looking for
Kind Regards,
Pavani P

[AP_Akash_07]

hi @pavani_paluri ,do you have any idea which capabilities do we need to assign to the mid servers to perform cloud discovery ? I have an idea but want to know if there is any documentation on the capabilities ? Thanks in advance 

[pavani_paluri]

Hi @AP_Akash_07 ,

I would suggest giving All or Cloud management capability to mid server. For specific cloud vendors, we have AWS, Azure and Google options as well.

Mark it helpful if this helps you to understand. Accept solution if this give you the answer you're looking for
Kind Regards,
Pavani P

[AP_Akash_07]

@pavani_paluri ,even I have given the same capability.But one of the questions I am getting is what does 'cloud mangement' capability specifically do ,how will it be used to discover it on the cloud .Can resources be discovered still if we remove this capability ? They want to know the specifics or like any official statement from servicenow about the same ,which I am not able to get ,thanks