Discovery - Windows Credential Permissions to function

[rodeliodoria]

    Hey everyone! I had a question on what is the minimal permissions that Discovery needs to gather data on window devices. We are using CyberArk as an external storage and the security team refuse to provide the permissions that ServiceNOW recommends. I wanted to check with the community and see if I might have missed something on minimal requirements for Discovery to find CI's for the CMDB.

• A domain administrator.
• A domain user with local administrator access on the target Windows hosts.
• A user who meets the requirements of Discovery Windows probes and permissions (Discoveryonly).
• A user who meets the requirements of the Orchestration activity to be run (Orchestration only).

[ashwinkumar_pat]

Hi Rodelio,

"A domain user with local administrator access on the target Windows hosts". This should be good enough for you to perform successful discovery.

Discovery provides the "Test Credentials" feature. Use that to test if the creds are working or not. Once you are sure that the creds work, perform "Quick Discovery" of only one windows server and see the discovery logs to check how did the discovery go. You can dive a level deeper by looking what each probe received as input (it's actually output but servicenow calls it input because it's an input to ECC queue) in xml format.

HTH

~@$#

[venkata97910]

Hi Rodelio,

Our client needs us to implement CyberArk for external credential storage. Can you help us with any sort of Documentation about the process flow and jar files required for it. Many Thanks!

Regards,

Venkat

[Community Alums]

We are also exploring the same. I am using below link as reference document. Have you made any progress so far? Any suggestions?

CyberArk credential storage integration

[rodeliodoria]

Feel free to message me and I can see how I can help.