Sync Managed By Members of AD security groups.

[Aaron25]

Hello,

We would like to Sync AD Security Groups from our AD to ServiceNow and import the Managed By Group members so we can create a catalog item that targets the Managed By Group User for approval.

What would the best way be to go about doing this so it's updated whenever we make Changes on our AD it syncs back to the environment?

 

[Punit S · Accepted solution]

To sync AD Security Groups from your Active Directory to ServiceNow and import the Managed By Group members, you can use the ServiceNow LDAP integration. Here are the general steps:

1. Configure the LDAP integration in ServiceNow: Go to the "LDAP Servers" module in the ServiceNow instance, and configure the LDAP integration to connect to your Active Directory.

2. Import AD Security Groups: Once the LDAP integration is set up, you can import AD Security Groups into ServiceNow. To do this, go to the "LDAP Groups" module and select the "Import LDAP Groups" option. This will import all the Security Groups from your Active Directory to ServiceNow.

3. Map Managed By Group members: Once the AD Security Groups are imported into ServiceNow, you can map the Managed By Group members to the appropriate ServiceNow users. To do this, you can create a script that runs periodically and retrieves the Managed By Group members for each AD Security Group, and then maps them to ServiceNow users based on their email addresses or other unique identifiers.

4. Create a catalog item: Once the Managed By Group members are mapped to ServiceNow users, you can create a catalog item that targets the Managed By Group User for approval. This can be done by creating a variable in the catalog item and populating it with the Managed By Group User based on the AD Security Group selected by the user.

5. Schedule periodic sync: To ensure that the ServiceNow instance stays up-to-date with any changes in the Active Directory, you can schedule a periodic sync between the two systems. This can be done using a scheduled job that runs at regular intervals and updates any changes in the AD Security Groups or Managed By Group members in ServiceNow.

I hope this helps you set up the desired functionality in your ServiceNow instance.

Please mark my answer as a solution/helpful in case it adds value and moves you a step closer to your desired ServiceNow solution goal.

Thanks,
Punit

[Aaron25]

Thanks Punit, 

We are actually going to see if we can do this by Azure and see if this works first as we don't want to do all groups in ServiceNow.   WIll keep looking.

Thanks for the advise.