API to query assignment groups and members read only

[VL10]

Can someone please get me started on how to provide read only API access to query assignment groups?   Can this be done via ITIL agent accounts or do we need to setup service accounts to do this, and what is the simplest way to get started?   We will query from a Python script and are on San Diego.

Many thanks in advance.

[Mike_R · Accepted solution]

ITIL user should have access. But if this is going to be used for an integration of some sorts, I would suggest creating a Service Account instead.

The simplest way to get started is to learn/play around with the REST API Explorer. This will let you preview REST messages and generate a python script. It's very powerful and simple to use.

https://developer.servicenow.com/dev.do#!/learn/courses/quebec/app_store_learnv2_rest_quebec_rest_in...

https://www.youtube.com/watch?v=i9YeiHiVzZ0

[Mike_R · Accepted solution]

ITIL user should have access. But if this is going to be used for an integration of some sorts, I would suggest creating a Service Account instead.

The simplest way to get started is to learn/play around with the REST API Explorer. This will let you preview REST messages and generate a python script. It's very powerful and simple to use.

https://developer.servicenow.com/dev.do#!/learn/courses/quebec/app_store_learnv2_rest_quebec_rest_in...

https://www.youtube.com/watch?v=i9YeiHiVzZ0

[VL10]

Thank you very much that is perfect for what we need.

This is a newbie question - but how would I authenticate in to my instance from a python script, if I am using SSO?

Eg. User name="admin", Password="admin" for this code sample.

user = 'admin'

pwd = 'admin'

Many thanks in advance.

[Mike_R · Accepted solution]

The API will bypass SSO. 

When you create the service account, set the password for that user and you can use that username & password combo to authenticate.