How to Disable OOB Table API access and its impact?

Rohail Nasir
Kilo Explorer

As part of our plan to make ServiceNow data available for other applications to use. It is necessary to secure the scope for these applications within ServiceNow. It may not be common for API consumers to play around with the provided endpoints. However it does have some security concerns. Therefore I looked into Scripted API to achieve this.

I believe it does provide what we need for scoping. Custom Role and ACLs of type "REST Endpoint" can be defined to provide access to relevant API endpoints. However there is a need of Table API to be disabled. So the question is

1. How it can be disabled?

2. What will be the impact? 

3. Is there any OOB application using table API?

 

1 ACCEPTED SOLUTION

Hi Rohail,

But I think using table level read ACLs you can handle this even though they have basic auth credentials.

What role that user has which they are using for basic auth?

Regards

Ankur

Regards,
Ankur
Certified Technical Architect  ||  9x ServiceNow MVP  ||  ServiceNow Community Leader

View solution in original post

6 REPLIES 6

Hi Rohail,

Any update on this?
Can you mark my answer as correct, helpful if you were able to achieve the requirement. This helps in removing this question from unanswered list and helps users to learn from your thread. Thanks in advance.

Regards
Ankur

Regards,
Ankur
Certified Technical Architect  ||  9x ServiceNow MVP  ||  ServiceNow Community Leader

Kumar Tella
Mega Expert

Hi there,

 

I have a similar situation. We are providing scripted REST APIs with service accounts and rest role for the systems/users who need the data from SN. We would like to disable the OOTB Table RESt API. currently any ITIL user can able to access table API with his/her username/pwd. We would like to disable this globally. Please guide me how to accomplish this? 

 

Thanks

Kumar