We are beginning our journey of integrating ServiceNow and Teams. We hope to use the Virtual Agent through Teams and chat between SN and Teams. We are at the point of working with our IS Security team and they are hesitant to allow all the permissions that are required. They want to make sure our hospital remains secure. Have any other hospitals integrated SN with Teams and do you have any insight on what permissions are really required for it to work. Here are the permissions we were told were needed, but do we really need them all and are they really safe to grant?
[Image 1: Microsoft consent screen for the ServiceNow “Notify Connector” app, requesting permission to sign in and read the user’s profile; read all users’ full profiles; read and create online meetings; join group calls and meetings as a guest or as an app; initiate outgoing group calls and one-to-one calls from the app; manage Teams apps for all chats; and allow the Teams app to manage all tabs for all chats. The screen indicates that these permissions are being reviewed for the organization.]
[Image 2: Microsoft consent screen for the ServiceNow “Requested Chats” app, requesting permission to read and write the user’s chat messages; maintain access to previously authorized data; sign in and read the user’s profile; read all users’ full profiles; read all files the user can access; read presence information for all users in the organization; read names and members of user chat threads; add and remove members from chats; and create chats. The screen states that accepting grants the app access to the specified resources for all users in the organization, without requiring individual consent.]
This is SN's version of what those permissions will do.
API Permissions - Starting a chat and showing Service Portal in a tab
API Permissions - Making a call and starting a meeting
We are currently on the Zurich version.
Any and all help would be greatly appreciated.
Thanks!
