Running Jobs as a SAM Admin

oberlel · 3 weeks ago

Hi all,

How do SAM Admins run jobs? We are working on direct integrations which the SAM Admin has the ability to configure in the tool, but you need developer access to run a job. As a SAM Admin, I can see the jobs results but not run.

For Instance, Adobe Connector has two jobs:

SAM - Import Adobe User Subscriptions & SAM - Optimize Adobe Subscriptions.

After configuring the connection, I would have to wait until Saturday to see if it worked and pulled in data, contact a developer and have them run the job, or work with a developer to change the date so that it runs more frequently. The SAM Optimize only runs monthly which means after I pulled in all the data, I could potentially have to wait a month to see the optimization and after cleaning up those suggestions, wait another month to see how well it did.

I cannot be assigned a SAM Developer role, because I am not a developer and I wouldn't want those rights. SAM Admins should be able to run any job that is within the module ad hoc.

Has anyone experienced this?

dbook · 2 weeks ago

This will require a change to the ACLs for 'sysauto_script', it's possible to configure this but would require your System Admin to perform, you need to have read access to the relevant records.

View solution in original post

dbook · 2 weeks ago

There is a good reason why as a SAM Admin you are unable to run the jobs, these reside in the Scheduled Jobs table and require write access to execute.

If SAM Developer is not suitable for you perhaps the 'sam_integrator' role would be suitable. There are many approaches your ServiceNow admin team could take to enable you to execute these jobs if there is a sufficient business reason whilst minimising risk.

oberlel · 2 weeks ago

@dbook

Thanks for the response. Would the "import_scheduler" role allow me to run jobs ad hoc and see the logs in they fail> The best use case for this type of access is configuring Saas integrations. As a SAM Admin, I can configure the connections but then unable to see if they worked without waiting for the scheduled job to run. Our SAM team consists of 2 people, and we do not have a dedicated ServiceNow Admin team for SAM. I am at the mercy of their schedule to help which stalls the program. Any suggestions would be greatly appreciated.

dbook · 2 weeks ago

Thanks for the extra detail, this helps. The role you would need is 'sam_integrator'. This will allow you to Configure SaaS integrations, execute schedules at will and yes see the results.

This role comes OOB with SaaS management to handle your use case.

https://www.servicenow.com/docs/bundle/zurich-it-asset-management/page/product/software-asset-manage...

Taksh · 2 weeks ago

@oberlel @dbook sam_admin contains sam_integrator role. Thus, any access granted to sam_integrator will automatically be granted to sam_admin.

That said, currently scheduled job execution is not available to SAM personas. Please feel free to submit an enhancement request via idea portal.