---
sourceDocument: Zurich ServiceNow AI Platform Administration
sourceDocumentLink: https://www.servicenow.com/docs/r/zurich/platform-administration

 Release :

    - zurich

ft:locale :

    - en-US

ft:publication_title :

    - Zurich ServiceNow AI Platform Administration

ft:clusterId :

    - platadm

bundleId :

    - platadm

workflow :

    - Platform


---

# Debug external content security filters for a ServiceNow AI Platform user

# Debug external content security filters for a ServiceNow AI Platform user {#ariaid-title1}

* Release version: Zurich
* 
* Updated July 31, 2025
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

Use the Session Log to view the set of externally defined user and group access permission filters associated with the current ServiceNow AI Platform user. Administrators can use this approach to verify that the proper user mappings exist for the current user.

## Before you begin

Role required: admin

## About this task

Enable session debugging for AI Search to view debug log messages for external content security. Each debug log message shows the external content security filter that AI Search applies to determine whether the current ServiceNow AI Platform user can see a search result for an external document.

## Procedure

1. To enable session debugging for AI Search, navigate to AllSystem DiagnosticsSession DebugDebug AI Search.
2. Navigate to AllSystem DiagnosticsSession DebugDebug Log.  
   The Session Log opens.
3. Use the [Search Preview UI for AI Search](https://www.servicenow.com/docs/tOD0BRYTda_dEGSET6HSvA#ai-search-preview "The Search Preview UI enables you to test AI Search queries using settings from a selected search profile. Administrator tools help you review search query performance data and feedback, debug queries, and override default query settings for testing purposes.") to submit the external content search query of interest.  
   Note:  
   To debug external content security access permissions for another user, specify their name in the Search Preview UI's user impersonation tool.
4. In the Session Log, filter for <kbd class="ph userinput">AIS:External Content Security Filter</kbd> to see the external content security filters applied when evaluating access to an external document search result for the current (or impersonated) ServiceNow AI Platform user.  

## What to do next

If the external content security filters don't include the desired external user or group access permissions, a search administrator can import an updated and corrected user mapping for the relevant ServiceNow AI Platform user. For more details on defining and importing user mappings, see [Mapping external users and groups to ServiceNow AI Platform users](https://www.servicenow.com/docs/ABbHiQyV9847FJCRks5kpQ#user-mappings-ais "AI Search external user mappings enable you to configure externally defined user and group aliases for ServiceNow AI Platform users. AI Search uses these aliased security principals to apply content security filters that control user access to search results indexed from external documents.").

*[\>]: and then