how to get details someone impersonate other person and change some details on instance?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-28-2023 09:28 AM
Hi Team,
how to get details someone impersonates another person and changes some details for instance?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-28-2023 11:09 AM
If you suspect that someone has impersonated another person and made changes in ServiceNow, here are some steps you can take:
Verify the identity of the original user: Try to contact the person whose identity was impersonated and verify their account activity in ServiceNow. Check their login history, recent activities, and any changes made to their account.
Check the audit trail: ServiceNow maintains an audit trail of all actions performed in the system. You can check the audit trail to see if there were any unusual activities, such as a login from an unfamiliar location or changes made outside of normal business hours.
Look for evidence: If you suspect that someone has made changes to a particular instance, you can look for evidence of these changes. For example, if a record was deleted or modified, you can look for a backup of the record or check if any related records were affected.
Contact ServiceNow support: If you are unable to resolve the issue on your own, you can contact ServiceNow support for assistance. They can help you investigate the issue and provide guidance on how to prevent similar incidents in the future.
Implement security measures: To prevent future incidents, you can implement security measures such as two-factor authentication, password policies, and access controls. You can also educate your users on how to recognize and report suspicious activities in the system.
Please mark my reply as Helpful and/or Accept Solution, if applicable. Thanks!
