Resolved! CSA CERTIFICATION
what is Elevated privilege?
Forum Posts
Restrict the user's access based on Multiple Levels
I need to fulfill a requirement in ServiceNow to restrict the user's access based on region, then based on data, there are 2 levels of filter or checks after that it will be decided whether that user can read that read or not. I want to keep the dat...
Best practice for promoting OAuth Application Registry (oauth_entity) records across instances
Hi all, I'm securing our Inbound REST APIs using OAuth 2.0 and have created the necessary Application Registry (oauth_entity) records in our Dev instance. I now need to move this configuration to Test and eventually Production, but I'm unsure of the ...
Resolved! How does ServiceNow protect its inbox from phishing emails, preventing that incidents are created?
I want to know how ServiceNow protects its inbox from phishing emails, preventing that they are converted to Incidents via inbound email action. We have a few phishing emails that generated incidents in the platform. We thought ServiceNow would ident...
Impact of New Password Policy on Users
Hello Developers, I was reviewing the post titled "ServiceNow Password Policies – A Complete Guide for Admins".https://www.servicenow.com/community/platform-privacy-security-blog/everything-you-need-to-know-about-password-policies-in/ba-p/3538368 I w...
Resolved! Clarification on ACL and Security Data Filter Execution Order
Hi all,I'm trying to understand the exact execution order between ACL processing and Security Data Filters.From the ACL documentation:A Pre-query ACL check occurs before a database query is executed.The pre-query check only evaluates user roles and d...
HTTP 401 Unauthorized When Calling Marketplace API via Postman
Hi everyone,I'm troubleshooting an issue where a user is receiving an HTTP 401 Unauthorized response when calling a ServiceNow Marketplace-related API through Postman using Bearer token authentication.The Authorization header appears to be configured...
Understanding ServiceNow’s New Basic Authentication Restrictions – Complete Admin Guide
Introduction ServiceNow has introduced an important security enhancement to help customers strengthen their cybersecurity posture by restricting insecure Basic Authentication API access for certain users. This change mainly impacts environments where...
Want some information about "Servicenow vault"
Hi, I want to know the information about "ServiceNow Vault." I have searched the community and documentation about that but found nothing useful. If anyone has a meaningful reference to learn about this, it will be helpful. Thank you,
Basic Auth Restriction Banner Message
Started getting this banner appear after logging in to all 3 instances. After reviewing the Identified Users table, there are 2 "users" that we need assistance on. 1) System Administrator User - this is only used for and logged into the module to mo...
Rollback for Data Privacy Clone in sub-production environment
Hello Community, Is it possible to roll back a data privacy clone in a sub production instance? It looks like the job can be rolled back but the data doesn't actually change. Thanks,Heather
Resolved! Query regarding MFA reset process
Hi Community, What are some of the options to verify user's identity when they contact helpdesk to reset their MFA?
Basic Auth users - where is the source of Usage count?
Hi all, Recently, ServiceNow placed a yellow banner at the top of our instances with Action Required: Review Basic Authentication Account Security. The first bullet point under Take Action is "Review the Identified Users table" (which goes to [sys_us...
Using OAuth the right way for inbound integration in ServiceNow
Hi all, I am new to OAuth. For inbound integration, do we need to provide username and password to an external platform to retrieve access token and refresh token?I have seen videos on Youtube on OAuth tutorial in ServiceNow and it mostly shows how t...
Resolved! How do I configure MFA to offer only Email OTP or only Auth App on first login depending on roles
We have a use case were we want certain users to be only able to use MFA by an authentication App whilst allowing other users to choose Email or authentication App. I have configured MFA to allow email for users for all users except those with the sp...
