SQL database User permission

[satyam6618]

We are currently receiving user service requests through ServiceNow and then manually connecting to SSMS to provide access to users.

We are planning to automate this process using ServiceNow and would appreciate your guidance on how to achieve this.

[Community Alums]

hi @satyam6618 ,

1️⃣ Understand the process and requirements first
Start by documenting what exactly happens when you manually give SSMS (SQL Server) access:
– What details does the user provide in the request?
– Which SQL Server(s) are involved?
– Which level of access is requested (read, write, admin)?
– Who approves the request (if anyone)?

This helps design the catalog item and flow properly.

---

2️⃣ Create a Service Catalog item
In ServiceNow, create a new catalog item where users can request access.
Add variables to collect all necessary details: database name, username, type of access, justification, etc.

---

3️⃣ Build approval flow (if needed)
Set up Flow Designer to route the request for manager approval or DBA approval before access is granted.

---

4️⃣ Automate the actual access step
Here you have a few options:

• Use PowerShell scripts to run SQL Server commands for adding the user to the right database role.

• Integrate directly from ServiceNow: You can build a MID Server script (PowerShell or JDBC) to execute these commands on your SQL Server.

• If your organization has an identity management tool (like CyberArk, SailPoint, etc.), integrate ServiceNow with that to handle the access.

[satyam6618]

Thank you for your response.

Could you please provide the PowerShell script and instructions on how to deploy it within ServiceNow? My organization utilizes the CyberArk tool, and this information would be very helpful.

– What details does the user provide in the request? -- User name , User ID , Server Name, Database Name 
– Which SQL Server(s) are involved? -- on Prime servers
– Which level of access is requested (read, write, admin)?-- Read_only -- This is only we are looking for Automate.
– Who approves the request (if anyone)? --- Application owner and DBA team.

This helps design the catalog item and flow properly.