Service Mapping via JEA or Agent Client Collector

[Patrick Oudsho1]

Hi all,

We are running Service Mapping here on our instance, using the OOTB setup with Windows Local Admin credentials on Windows Servers. However, we wish to improve our (discovery) security and are looking at Microsoft Just Enough Administration (JEA) or Agent Client Collector as a replacement.

But do these solutions support Service Mapping or does Service Mapping only work on Windows servers via the setup where a Local Admin account is used?

Anybody any experience/knowledge on this?

Cheers,

Patrick

[MattSN]

It may not be impossible but the level of access required is much greater for Service Mapping than for Discovery so you would need to build a rather complex JEA profile. There is some good discussion about attempting it at this link but it looks like nobody has a success story with JEA/Service Mapping.

https://www.servicenow.com/community/itom-forum/why-does-service-mapping-need-local-admin-access-on-...

[AJ-TechTrek]

Hi @Patrick Oudsho1 ,

ServiceMapping should support the discovery using the JEA Access, As Service Mapping also using the discovery module only.

You can test the same using the Service Mapping discovery for one window server.

Please appreciate the efforts of community contributors by marking appropriate response as correct answer and helpful, this may help other community users to follow correct solution in future.

Thanks

Ajay Kumar

[ahmadadnan]

Hi @Patrick Oudsho1 

Yes, JEA support Service Mapping

I have implemented this recently.