Service Graph Connector for Azure data Import

[Naushad1]

Dear All,

We are in a process to import Hardware Cis from Microsoft Azure through Service Graph connector. Connection was successful however not getting any data while running the imports. We followed the guided setup.

Is there any additional step we are missing?

Appreciate any help!

State: Complete

Completion code: Success

Message: No insert or update

Attached message for reference.

Note: Azure client application has User.Read permission on Microsoft Graph API.

[Prabu Velayutha]

Hi @Naushad1 

On the Azure API permission you need to request Azure team to verify following while registering new application.

Refer the community link and share it with your Azure team to verify all the steps given in the link

https://www.servicenow.com/community/cmdb-articles/service-graph-connector-for-azure-overview/ta-p/2...

• Select API permissions.
• Assign ‘User.Read’ permission in Microsoft Graph API with type ‘Delegated’.
• Assign ‘Data.Read’ permission in Log Analytics API with type ‘Delegated’.
• Select Subscription and select IAM
• Add the application you have created.

Setup on Azure
Step 1: Create a service principal (i.e. the authentication mechanism)
Step 2: Create a Log Analytics Workspace
Step 3: Create Automation Account
Step 4: Enable Change Tracking and Inventory from an Automation account
Change Tracking and Inventory comes with an additional pricing hope your company has the required subscription for this.

Mark this as Helpful and Accept the Solution if my response helps to solve your issue

[Naushad1]

@Prabu Velayutha Thank you so much for your support on this 🙂

We followed the article and Azure team confirmed all necessary permissions are provided.

Change Tracking and Inventory comes with an additional pricing hope your company has the required subscription for this. -  This can be cause of the error we are getting for software import? Do we need to get any sort of plugin or setup before we try to connect?

The error "Insufficient access to perform the requested action: Verify User.Read Permission on API graph" we are getting for software import is strange, we are using the same credential details as for hardware import. I am assuming we can use the same Graph API credentials for both hardware and software imports.

[Prabu Velayutha]

Hi @Naushad1 I'm happy if it helped. 

Change Tracking and Inventory is part of Azure setup and subscription, only the Azure admin or SME from your Org can clarify. 

If the required permissions are there then test the APIs with post man or request Azure team to test the API and check if they get response from the graph API end points consumed by the Service Graph connector data sources.  

If issue with Graph APIs not responding even outside Servicenow testing then Azure team should check and open case with Azure support if they can't resolve it. Also check if they have any restriction or limit on number of records to be retrieved per call. 

But If they confirm that API responses are retrieved with the same credentials then I would suggest open a case with Servicenow support and get their Expert support tech and have a working session with you Azure team.

If my response helps to solve your issue. Kindly mark it as helpful & correct.

[tanu9]

We are also facing same issue. If you were you able to resolve it, please guide us. 

[mahi4889Snow]

I am also facing same issue with data import? when all connections and permission are correctly setup?