question Re: How to resolve scan finding in Developer forum

How to resolve scan finding

Robert Hames — Wed, 20 Jul 2022 18:59:36 GMT

We had a security scan run on our instance, and there is one finding that I don't know how to resolve.

Short description: There is a dedicated integration user that runs actions in place of the default

Resolution details: Run as user in automated scripts should have internal_integration_user field checked in user record

This finding is there for each of my scheduled script executions. When I created them, I presumed that the system user would run them. Now, apparently I need to designate a user, and have the above mentioned field checked in the user record.

Do I need to setup a designated user and check this field? If so, what roles should that user have?

Any help/suggestions would be appreciated!

Re: How to resolve scan finding

Aman Kumar S — Wed, 20 Jul 2022 19:06:56 GMT

System user is fine, just need to mark the mentioned field as true on user record.

Feel free to mark correct, If I answered your query.

Will be helpful for future visitors looking for similar questions 🙂

Re: How to resolve scan finding

Robert Hames — Wed, 20 Jul 2022 19:15:23 GMT

Our system admin user already has "Internal Integration User" checked.

(see attachment for screenshot as this forum won't allow me to copy from clipboard)

Re: How to resolve scan finding

Aman Kumar S — Wed, 20 Jul 2022 19:21:15 GMT

Even for those jobs you are getting this error?

Re: How to resolve scan finding

Robert Hames — Tue, 26 Jul 2022 15:30:52 GMT

@Aman Kumar

Yes, I ran another scan to be sure, and every scheduled script in my system has the same finding.

Re: How to resolve scan finding

Aman Kumar S — Thu, 28 Jul 2022 14:41:38 GMT

Well, if it is the case, raise a HI ticket for get to the bottom of this, if your user acc has the required check box marked, it should resolve the issue.

Re: How to resolve scan finding

Mark Roethof — Thu, 28 Jul 2022 16:48:59 GMT

Hi there,

What kind of security scan, can you share a bit more? Is it a scan from ServiceNow, like HealthScan? Something else?

Anyway, because someone scans your instance and has findings, doesn't mean you have to follow everything or just agree on everything. Also push some back, ask, etcetera! Because something is a ServiceNow best practice, does not make it your best practice.

I do have a similar Scan Check setup in my Instance Scan. Actually I do filter out the admin user 🙂 See below:

If my answer helped you in any way, please then mark it as helpful.

Kind regards,
Mark
2020-2022 ServiceNow Community MVP
2020-2022 ServiceNow Developer MVP

---

LinkedIn
Community article, blog, video list

Re: How to resolve scan finding

Aman Kumar S — Mon, 01 Aug 2022 09:50:49 GMT

Totally agree there, there are few instances that we have faced during these health scans where what OOB configs would have followed, if we end up doing the same, those get caught up in the findings.

Can be tricky sometimes, where to draw the line.

Re: How to resolve scan finding

Luiz Guilherme — Mon, 15 Aug 2022 19:31:57 GMT

Hello @Robert Hames , please let me know your findings, if you could solve this problem, because I am in the same place. Thank you