Keeping credentials records secure but have any ServiceNow user have read access to make requests
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
yesterday
Hi all,
I'm wondering what are the best practices when developing a ServiceNow app that creates a new table that keeps 3rd party platform credentials, but have the ability to let any ServiceNow user be able to use those credentials to make requests to the 3rd party platform. Are there more than the below options to accomplish this? Is there a way to hide the credentials from users but still let them make requests?
1. Add a new role and create an ACL to read the table with this role. Any ServiceNow user that wants to make requests need to have this role.
2. Add a new ACL to the table with read access with Public role, but add the security condition that the user must be logged in to ServiceNow.
