- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
10-08-2018 11:31 PM
As part of our plan to make ServiceNow data available for other applications to use. It is necessary to secure the scope for these applications within ServiceNow. It may not be common for API consumers to play around with the provided endpoints. However it does have some security concerns. Therefore I looked into Scripted API to achieve this.
I believe it does provide what we need for scoping. Custom Role and ACLs of type "REST Endpoint" can be defined to provide access to relevant API endpoints. However there is a need of Table API to be disabled. So the question is
1. How it can be disabled?
2. What will be the impact?
3. Is there any OOB application using table API?
Solved! Go to Solution.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
10-09-2018 10:13 PM
Hi Rohail,
But I think using table level read ACLs you can handle this even though they have basic auth credentials.
What role that user has which they are using for basic auth?
Regards
Ankur
Ankur
✨ Certified Technical Architect || ✨ 9x ServiceNow MVP || ✨ ServiceNow Community Leader
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
10-22-2018 06:17 AM
Hi Rohail,
Any update on this?
Can you mark my answer as correct, helpful if you were able to achieve the requirement. This helps in removing this question from unanswered list and helps users to learn from your thread. Thanks in advance.
Regards
Ankur
Ankur
✨ Certified Technical Architect || ✨ 9x ServiceNow MVP || ✨ ServiceNow Community Leader
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-04-2019 11:45 AM
Hi there,
I have a similar situation. We are providing scripted REST APIs with service accounts and rest role for the systems/users who need the data from SN. We would like to disable the OOTB Table RESt API. currently any ITIL user can able to access table API with his/her username/pwd. We would like to disable this globally. Please guide me how to accomplish this?
Thanks
Kumar