Hi all,I'm trying to understand the exact execution order between ACL processing and Security Data Filters.From the ACL documentation:A Pre-query ACL check occurs before a database query is executed.The pre-query check only evaluates user roles and d...
what is Elevated privilege?
Hi all, I'm securing our Inbound REST APIs using OAuth 2.0 and have created the necessary Application Registry (oauth_entity) records in our Dev instance. I now need to move this configuration to Test and eventually Production, but I'm unsure of the ...
I need to fulfill a requirement in ServiceNow to restrict the user's access based on region, then based on data, there are 2 levels of filter or checks after that it will be decided whether that user can read that read or not. I want to keep the dat...
I want to know how ServiceNow protects its inbox from phishing emails, preventing that they are converted to Incidents via inbound email action. We have a few phishing emails that generated incidents in the platform. We thought ServiceNow would ident...
Hello Developers, I was reviewing the post titled "ServiceNow Password Policies – A Complete Guide for Admins".https://www.servicenow.com/community/platform-privacy-security-blog/everything-you-need-to-know-about-password-policies-in/ba-p/3538368 I w...
Hi everyone,I'm troubleshooting an issue where a user is receiving an HTTP 401 Unauthorized response when calling a ServiceNow Marketplace-related API through Postman using Bearer token authentication.The Authorization header appears to be configured...
Introduction ServiceNow has introduced an important security enhancement to help customers strengthen their cybersecurity posture by restricting insecure Basic Authentication API access for certain users. This change mainly impacts environments where...
Hi, I want to know the information about "ServiceNow Vault." I have searched the community and documentation about that but found nothing useful. If anyone has a meaningful reference to learn about this, it will be helpful. Thank you,
Started getting this banner appear after logging in to all 3 instances. After reviewing the Identified Users table, there are 2 "users" that we need assistance on. 1) System Administrator User - this is only used for and logged into the module to mo...
Hello Community, Is it possible to roll back a data privacy clone in a sub production instance? It looks like the job can be rolled back but the data doesn't actually change. Thanks,Heather
Just a couple questions on Data Privacy 1. Can you rollback anonymization at anytime after the job has completed (ie. 6 months later) or is it just immediately after job is run? 2. If you anonymize phone number, can you still click on the phone num...
Hi Community, What are some of the options to verify user's identity when they contact helpdesk to reset their MFA?
Hi all, Recently, ServiceNow placed a yellow banner at the top of our instances with Action Required: Review Basic Authentication Account Security. The first bullet point under Take Action is "Review the Identified Users table" (which goes to [sys_us...
Hi all, I am new to OAuth. For inbound integration, do we need to provide username and password to an external platform to retrieve access token and refresh token?I have seen videos on Youtube on OAuth tutorial in ServiceNow and it mostly shows how t...