Retrict specific Users to OAuth Registry

daiva
Tera Guru

Hello Community,

How to limit only specific users to get the OAuth access
Users with "Integration_user" role only need to get accesss

Thanks,
Prasad N

 

5 REPLIES 5

Ankur Bawiskar
Tera Patron
Tera Patron

@daiva 

there is no explicit requirement to restrict as the token gets generated either via Flow or script

What's your business requirement?

If my response helped please mark it correct and close the thread so that it benefits future readers.

Regards,
Ankur
Certified Technical Architect  ||  9x ServiceNow MVP  ||  ServiceNow Community Leader

Hello @Ankur Bawiskar ,

We are using OAuth 2.0 for a scripted REST API. 
I want to limit who can generate the token to a specific number of users.

With a client ID and secret, anyone in our company can now generate the token.
We wish to keep the API at a higher level of security.
We want to do the above configuration even though we are using ACL.


Thanks,
Prasad N

@daiva 

you can add ACL on oauth_credential table

check this link

Non-admin users cannot retrieve OAuth token from OAuth Credentials table to make outbound REST call 

If my response helped please mark it correct and close the thread so that it benefits future readers.

Regards,
Ankur
Certified Technical Architect  ||  9x ServiceNow MVP  ||  ServiceNow Community Leader

@daiva 

Thank you for marking my response as helpful.

If my response helped please mark it correct and close the thread so that it benefits future readers.

Regards,
Ankur
Certified Technical Architect  ||  9x ServiceNow MVP  ||  ServiceNow Community Leader