How to trigger Access Analyzer - Comparing user records through script background
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
3 weeks ago
I would like to know the class and code details how to trigger Access Analyzer - simulators from backend scripts. I have tried below script include but couldn't figure it out...!!!
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
3 weeks ago
The access analyzer queries the tables for the types of records you are comparing, sys_user, sys_user_has_role or sys_user_grmember and then the comparison is done clientside. I think you might have already figured this out but nonetheless
[
{
"type": "GRAPHQL",
"definitionSysId": "21f155c65310101024e5ddeeff7b1210",
"inputValues": {
"encodedQuery": {
"type": "JSON_LITERAL",
"value": "user.sys_id=62826bf03710200044e0bfc8bcbe5df1^ORuser.sys_id=0a826bf03710200044e0bfc8bcbe5d7a"
},
"offset": {
"type": "JSON_LITERAL",
"value": null
},
"returnFieldMetadata": {
"type": "JSON_LITERAL",
"value": false
},
"sortType": {
"type": "JSON_LITERAL",
"value": "asc"
},
"limit": {
"type": "JSON_LITERAL",
"value": "100000"
},
"orderBy": {
"type": "JSON_LITERAL",
"value": "role"
},
"returnRowCount": {
"type": "JSON_LITERAL",
"value": false
},
"returnFields": {
"type": "JSON_LITERAL",
"value": "user,role"
},
"queryCategory": {
"type": "JSON_LITERAL",
"value": ""
},
"returnTableMetadata": {
"type": "JSON_LITERAL",
"value": false
},
"table": {
"type": "JSON_LITERAL",
"value": "sys_user_has_role"
}
},
"macroponentSysId": "b2d8fb3e77403110638cfe21fe5a99fa",
"pipelineId": "dataSource"
}
]There is no complex backend logic and there aren't even records saved for these types of static comparisons. The comparison script would then essentially be diffing two arrays or objects. To use the other analyzer features programmatically you can create a script include inside the scope and extend the AccessAnalyzeExecutor script include. To analyze create a record in the [sn_access_analyzer_request] table and call the analyze method on that record.
var a = new GlideRecord("sn_access_analyzer_request")
a.newRecord()
a.setValue("operations", "read")
a.setValue("target_table", "incident")
a.setValue("analyze_by", "User")
a.setValue("resource_type", "record")
a.setValue("target_record", "e8e875b0c0a80164009dc852b4d677d5")
a.setValue("target_field", "active")
a.setValue("analyzed_by", "User: Abel Tuter")
a.setValue("user", "62826bf03710200044e0bfc8bcbe5df1")
var action = {}
action.setRedirectURL = function () { }
new sn_access_analyzer.MyAccessAnalyzer().analyze(a, action);var MyAccessAnalyzer = Class.create();
MyAccessAnalyzer.prototype = Object.extendsObject(AccessAnalyzeExecutor, {
type: 'MyAccessAnalyzer'
});
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
3 weeks ago
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
3 weeks ago
You have to make the new script include callable from global scope if you want to use it in a background script
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
3 weeks ago
I have tried for compare 2 user accounts, and allowed accessible from all scopes still not able to get the code to call correct and get result could you please share the exact code you are using and a screenshot of the result as exactly as oob access analyzer
