- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
12-29-2019 11:04 PM
Dear Developers,
There is a requirement as below
We need to create a service account on Service now production instance with REST api Access and ITIL permission.
Actually they want to integrate their tool with our servicenow instance and for which they need
service account on Service now production instance with REST api Access and ITIL permission.
So I have created one dummy user and given ITIL role. What more role i have to give to the created user so that they can use this.
Regards,
Manmath
Solved! Go to Solution.

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
12-29-2019 11:28 PM
Hi there,
Actually only ITIL (with it's automatic inherited roles) is enough on an out-of-the-box environment.
It's more that you need the appropriate writes (ACLs) for the tables concerned. ITIL can read incidents table for example. Though sn_hr_core_case table would NOT be possible to read with ITIL.
So, where does that dummy user / integration actually needs to have access on?
Being it a integration user, also consider to check the "Web service access only" field on the user record.
There are indeed some specific web server / rest roles available. Though... actually not needed. You can easily test this yourself using the REST API Explorer, creating sample code, and executing it with user+password from a ITIL only user.
(= tested on New York)
If my answer helped you in any way, please then mark it as helpful.
Kind regards,
Mark
---
LinkedIn
Community article list
Kind regards,
Mark Roethof
Independent ServiceNow Consultant
10x ServiceNow MVP
---
~444 Articles, Blogs, Videos, Podcasts, Share projects - Experiences from the field
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
12-29-2019 11:07 PM
Role required: web_service_admin / rest_api_explorer

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
12-29-2019 11:28 PM
Hi there,
Actually only ITIL (with it's automatic inherited roles) is enough on an out-of-the-box environment.
It's more that you need the appropriate writes (ACLs) for the tables concerned. ITIL can read incidents table for example. Though sn_hr_core_case table would NOT be possible to read with ITIL.
So, where does that dummy user / integration actually needs to have access on?
Being it a integration user, also consider to check the "Web service access only" field on the user record.
There are indeed some specific web server / rest roles available. Though... actually not needed. You can easily test this yourself using the REST API Explorer, creating sample code, and executing it with user+password from a ITIL only user.
(= tested on New York)
If my answer helped you in any way, please then mark it as helpful.
Kind regards,
Mark
---
LinkedIn
Community article list
Kind regards,
Mark Roethof
Independent ServiceNow Consultant
10x ServiceNow MVP
---
~444 Articles, Blogs, Videos, Podcasts, Share projects - Experiences from the field

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
12-30-2019 12:03 AM
Hi,
Other than ITIL, a read access on the table for which you are going to enable REST API access.
Also in the user profile, check the option "Web service access only" for this user.
Go to REST API Explorer in the left navigation and you can test as that user to see if everything is working fine.
Mark the comment as a correct answer and helpful if it helps.