- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Sunday
When I upgraded to Zurich, several users were added to the "Conditional Script Writer" group.
After some research, I found that script developers must belong to this group.
However, I couldn't find a function that automatically assigns users to this group.
It seems that not all users created before the upgrade belong to the group.
The group description read:
"This is the default group introduced by ServiceNow that grants members the snc_required_script_writer_permission. If the administrator has not configured scripting governance, new members will be automatically added to this group through the auto-provisioning job."
I'd like to know what "auto-provisioning job" is.
Solved! Go to Solution.

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Monday
Hi,
The auto provision job is controlled by the system property 'glide.security.scripting_role.auto_provisioning'
The system property controls the running of two BRs, both called 'Contextual Writer Group Management' which will add members based on active status and roles
The sys_trigger scheduled job 'Update Users in Conditional Script Writer Group' runs weekly to update users too
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Monday
Hi @bonsai,
Once you upgrade your instance to Zurich, the Scripting Governance Tool is enabled by default. To ensure smooth functionality and avoid breaking any configurations, the system runs an initial provisioning job. This job adds every user with at least one role to the "Conditional Script Writer" group.
Additionally, there is a system property responsible for auto-assigning all new users to the Conditional Script Writer Group. This property is glide.security.scripting_role.auto_provisioning, which indicates whether auto-provisioning for Scripting Governance is enabled.
Please keep in mind that if this property is set to false, it cannot be changed back to true due to its safe-override compliant nature.
For ease of management, you can configure auto-provisioning directly from the Scripting Governance Tool dashboard. Within this dashboard, you can:
Scan for users who have scripted: This allows you to find users who have scripted within a specific time frame.
Auto-assignment: You can enable or disable auto-assignment, which will automatically add new users to the Conditional Script Writer group.
Manual Configuration: This option allows you to manually manage users who need to be part of the group.
To access this dashboard, you need to elevate to the security_admin role. Then navigate to All > System Security > Scripting Governance Tool.
If my response helped, please mark it as the accepted solution so others can benefit as well.
Muhammad Iftikhar
If my response helped, please mark it as the accepted solution so others can benefit as well.

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Monday
Hi,
The auto provision job is controlled by the system property 'glide.security.scripting_role.auto_provisioning'
The system property controls the running of two BRs, both called 'Contextual Writer Group Management' which will add members based on active status and roles
The sys_trigger scheduled job 'Update Users in Conditional Script Writer Group' runs weekly to update users too
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Monday
Hi @bonsai,
Once you upgrade your instance to Zurich, the Scripting Governance Tool is enabled by default. To ensure smooth functionality and avoid breaking any configurations, the system runs an initial provisioning job. This job adds every user with at least one role to the "Conditional Script Writer" group.
Additionally, there is a system property responsible for auto-assigning all new users to the Conditional Script Writer Group. This property is glide.security.scripting_role.auto_provisioning, which indicates whether auto-provisioning for Scripting Governance is enabled.
Please keep in mind that if this property is set to false, it cannot be changed back to true due to its safe-override compliant nature.
For ease of management, you can configure auto-provisioning directly from the Scripting Governance Tool dashboard. Within this dashboard, you can:
Scan for users who have scripted: This allows you to find users who have scripted within a specific time frame.
Auto-assignment: You can enable or disable auto-assignment, which will automatically add new users to the Conditional Script Writer group.
Manual Configuration: This option allows you to manually manage users who need to be part of the group.
To access this dashboard, you need to elevate to the security_admin role. Then navigate to All > System Security > Scripting Governance Tool.
If my response helped, please mark it as the accepted solution so others can benefit as well.
Muhammad Iftikhar
If my response helped, please mark it as the accepted solution so others can benefit as well.