question What elevated commands are executed by ServiceNow for Service Mapping ? in ITOM forum

What elevated commands are executed by ServiceNow for Service Mapping ?

Pranita Bahugun — Wed, 03 Dec 2025 08:17:33 GMT

Hello Community,

I am working on configuring Service Mapping in ServiceNow and need clarity on the Unix – Enhanced ADM (ADME) probe.

From the documentation, I see that the probe requires elevated permissions to run certain commands. For example, on AIX the recommended sudoers entry is:

Cmnd_Alias ADME_CMDS=/usr/bin/netstat -Aan, /usr/sbin/lsof -iTCP -n -P
discoUser ALL=(root) NOPASSWD:ADME_CMDS
Defaults:discoUser !requiretty

Currently my user has lower level of access but i could see the processes details available in ecc_queue input details of ADME probe but those processes are not getting discovered or are not getting associated to server post discovery, what could be the reason behind this behavior?

My questions are:

What exact commands does the Unix ADME probe execute on Linux/AIX/Solaris?
Do I need to configure both netstat and lsof or is one sufficient?
What information do these commands provide to Service Mapping (e.g., process‑to‑port mapping, established connections)? Or Service Mapping uses some other specific set of commands?
Why are elevated permissions required for these commands, and are there best practices for limiting scope to only what ServiceNow needs?

I want to ensure I configure sudoers correctly so that the Discovery user has just enough privilege to run the required commands, without granting full root access.

Thanks in advance for your guidance!

Best Regards,

Pranita Bahuguni

Re: What elevated commands are executed by ServiceNow for Service Mapping ?

VivekSattanatha — Wed, 03 Dec 2025 14:43:58 GMT

Hi,

ServiceNow documented already what level of elevated rights required for different operating system. Please go through them and make the sudoers accordingly

https://www.servicenow.com/docs/bundle/zurich-it-operations-management/page/product/service-mapping/reference/r_CommandsnCredentials.html

Regards,

Vivek

Re: What elevated commands are executed by ServiceNow for Service Mapping ?

SK Chand Basha — Thu, 04 Dec 2025 05:01:27 GMT

Hi @Pranita Bahugun

https://www.servicenow.com/docs/bundle/zurich-it-operations-management/page/product/service-mapping/reference/r_CommandsnCredentials.html

You can use this above Servicenow docs for the list if commands

https://youtu.be/ufACUmFvg0c?si=pNuEHKflTjCznZUa

Re: What elevated commands are executed by ServiceNow for Service Mapping ?

Pranita Bahugun — Wed, 17 Dec 2025 12:13:38 GMT

Hi @VivekSattanatha,

Thank you for your reply, it was very helpful. As per the ServiceNow documentation, we have configured the sudoers file accordingly. However, when the Enhanced ADME probe is triggered, there are still certain commands that fail with permission errors, such as:

lsof -iTCP -n -P
netstat -antp
ss -tlnp
ss -tenp

Could you please advise where we can find the complete list of commands executed by the Unix/Windows – Enhanced Application Dependency Mapping probe? The commands referenced in the documentation appear to differ from the ones failing here, and I would like to understand this better.

Your guidance would be much appreciated. Thanks in advance.

Re: What elevated commands are executed by ServiceNow for Service Mapping ?

Pranita Bahugun — Wed, 17 Dec 2025 12:14:09 GMT

Hi @SK Chand Basha,

lsof -iTCP -n -P
netstat -antp
ss -tlnp
ss -tenp

Your guidance would be much appreciated. Thanks in advance.

Re: What elevated commands are executed by ServiceNow for Service Mapping ?

VivekSattanatha — Wed, 17 Dec 2025 12:44:49 GMT

@Pranita Bahugun

The Enhanced ADM probe command lists are documented here. I can see these are all not documented in one place.

https://www.servicenow.com/docs/bundle/zurich-it-operations-management/page/product/discovery/reference/r_ApplicationDependencyMapping.html

Re: What elevated commands are executed by ServiceNow for Service Mapping ?

SK Chand Basha — Sat, 20 Dec 2025 06:59:29 GMT

Hi Pranita

Please use the below links to find the commands

Commands used in Patterns

https://<instance_name>.service-now.com/pd_command_list_list.do?sysparm_userpref_module=1b1ae4e44fab1110d8de066fae72e050&sysparm_clear_stack=true

Service Mapping Commands

https://<instance_name>.service-now.com/sa_mapping_ext_commands_list.do?sysparm_userpref_module=7b3d67e97f300200f128134f8dfa91ce&sysparm_clear_stack=true