We are implementing ITOM Visibility. There are steps that require elevated privileges on the discovery target and those are called out well on this document. Service Mapping commands requiring a privileged user (servicenow.com)
While that does tell you, per platform type WHAT commands are used that will require elevated privileges but it cannot really get into WHERE those calls are being made so that the affected team can evaluate the risk and need for each call. There could literally be hundreds of calls across dozens of discovery patterns.
The question: Is there a way to query all of the steps for each of the commands that require elevated rights?
In the pattern designer, you can search for terms (see screenshot) but I have not found a way to use regex to keep from triggering on every try/catch for CAT for example.
Understandable from the solution owners perspective. They want to know what you are reading with CAT and SUDO rights. You could literally read any file on any server. The flip side, our service mapping is in peril unless we can resolve their concerns.
