---
sourceDocument: Australia Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/australia/platform-security

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Exploring Machine Identity Console

# Exploring Machine Identity Console {#ariaid-title1}

Release version: Australia  
Updated March 12, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 3 minutes to read  
Manage your service accounts, which are used for integrations with ServiceNow.

Machine Identity Console enables you to manage your non-human identities (NHIs) that are used to identify, authenticate, and authorize different software entities to access secured resources of ServiceNow. The entities that gain access include applications, workloads, APIs, bots, and automated systems. Unlike human identities, non-human identities (NHIs) aren't governed in the same manner and aren't
directly associated with a human. Their identity and verification methods are distinct from the human users, and standard human security measures are not applicable to them.  
Note:  
You need the <kbd class="ph userinput">mi_admin</kbd> role to use the Machine Identity Console.

Here's what is available on the Machine Identity Console Overview page:

* Total Machine identity (integration) accounts and the Accounts with high privilege roles.
* Unique API calls - Last 7 days
* Authentication method used - Last 7 days
* Machine Identity Security score and findings related to the identity.

{#explore-machine-identity-console__ul_mxn_y1x_ffc}  
Note:  
Accounts that have the Internal Integration User field set to <kbd class="ph userinput">true</kbd> in their `sys_user` record will not populate data in the Machine Identity Console.

## Roles and access {#explore-machine-identity-console__mic_roles_and_access}

The <kbd class="ph userinput">mi_admin</kbd> role gives admin access to the Machine Identity Console. It is a high privilege role because it contains other admin roles, so assign it carefully.

## How data is counted and scored {#explore-machine-identity-console__mic_data_and_score}

Some requests aren't counted in the Machine Identity Console, such as maintenance sessions, impersonation sessions, failed logins, MID Server traffic, and requests from internal IP addresses. For the full list, see [Metrics](https://www.servicenow.com/docs/Mh_SM0EJv3~FLnclUo~pUA "Metrics of the machine identities.").

Request records are kept for 30 days, and user tracker records are kept for 180 days. Homepage metrics and scores are computed daily at 00:01 and don't include the current day, so they can be about a day behind the list pages.

The security score is made up of categories. Each active category has an equal share of 100 points, and any remainder goes to the UI login and integration category. For details, see [Security findings](https://www.servicenow.com/docs/JTKVZ5ylup3Xab_DL4BKDg "Provides Machine Identity security score and findings.").

The categories are:

* [Accounts using Basic Authentication](https://www.servicenow.com/docs/sXdQT1XrHzhA1eNp0IuwRA "Display the findings about the accounts that are using only basic authentication to authenticate the APIs under the Security findings in the Machine Identity Console.")
* Unique API calls
* High privilege accounts
* [Accounts with no login for 100 days](https://www.servicenow.com/docs/XNrAaw08de77wRGwIzUdRQ "Display the findings about the accounts that have not accessed any API in 100 days under the Security findings in the Machine Identity Console.")
* [Integration accounts with Web Service Access set to false](https://www.servicenow.com/docs/vLay9KLtpPOiZnvN_ZhwoQ "Display the findings about the accounts that are authentication ServiceNow with the Web Service Access set to false under the Security findings in the Machine Identity Console.")
* [Accounts performing both UI and API login](https://www.servicenow.com/docs/2XMlwrLn_eR2OIyq4v93Vw "Display the findings about the accounts that are performing UI and API login under the Security findings in the Machine Identity Console.")

## Score categories {#explore-machine-identity-console__mic_categories}

Each category below contributes to the Machine Identity Security score.
{#explore-machine-identity-console__table_mic_categories__entry__2}

| Category | What it covers |
|-|-|
| Basic authentication | Accounts that authenticate with basic authentication. See [Accounts using Basic Authentication](https://www.servicenow.com/docs/sXdQT1XrHzhA1eNp0IuwRA "Display the findings about the accounts that are using only basic authentication to authenticate the APIs under the Security findings in the Machine Identity Console."). |
| Unique API calls | Unique API calls made in the last 7 days. This data is collected in real time. |
| High privilege accounts | Machine integration accounts that have high privilege roles. This data is collected in real time. |
| No login for 100 days | Accounts that haven't logged in for 100 days. The list uses a 99-day window. See [Accounts with no login for 100 days](https://www.servicenow.com/docs/XNrAaw08de77wRGwIzUdRQ "Display the findings about the accounts that have not accessed any API in 100 days under the Security findings in the Machine Identity Console."). |
| Integration accounts with WSA disabled | Integration accounts where web service access is disabled. See [Integration accounts with Web Service Access set to false](https://www.servicenow.com/docs/vLay9KLtpPOiZnvN_ZhwoQ "Display the findings about the accounts that are authentication ServiceNow with the Web Service Access set to false under the Security findings in the Machine Identity Console."). |
| UI login and integration | Accounts that log in through the UI or API. This category also receives any remainder of the score. See [Accounts performing both UI and API login](https://www.servicenow.com/docs/2XMlwrLn_eR2OIyq4v93Vw "Display the findings about the accounts that are performing UI and API login under the Security findings in the Machine Identity Console."). |
[Table 1. Score categories]

{#explore-machine-identity-console__table_mic_categories}

## Data that isn't displayed {#explore-machine-identity-console__mic_data_not_displayed}

The Machine Identity Console doesn't show the following requests. All other requests are shown.

* Maintenance sessions
* Impersonation sessions
* Failed logins
* Responses with status 400, 401, or 500
* MID Server traffic
* Requests from internal IP addresses
* GraphQL requests
* OAuth requests that use the authorization code grant type
* Accounts with the Internal Integration User field set to <kbd class="ph userinput">true</kbd>

To change which APIs are collected, use the `sys_mi_resource_filter` table. See [Metrics](https://www.servicenow.com/docs/Mh_SM0EJv3~FLnclUo~pUA "Metrics of the machine identities.").

## Properties {#explore-machine-identity-console__mic_properties}

To turn off the Machine Identity Console, set identity.mi.enabled to `false`.
{#explore-machine-identity-console__table_mic_properties__entry__3}

| Property | Default | Description |
|-|-|-|
| identity.mi.enabled | `true` | Machine Identity Management feature flag. |
| identity.mi.buffer.size | `2097152` | Machine Identity buffer size. |
| identity.mi.sampling.enabled | `false` | Machine Identity sampling feature flag. |
| identity.mi.sampling.window.in.minutes | `1` | Sampling window, in minutes. |
| identity.mi.sampling.per.window.threshold | `500` | Sampling window threshold. |
| identity.mi.sampling.block.ratio | `0` | Random sampling ratio. |
[Table 2. Machine Identity Console properties]

{#explore-machine-identity-console__table_mic_properties}

## Machine Identity Console tables {#explore-machine-identity-console__mic_tables}

{#explore-machine-identity-console__table_mic_tables__entry__3}

| Navigation entry | Table | Retention |
|-|-|-|
| MI Requests | `sys_mi_request` | 30 days |
| MI User Trackers | `sys_mi_user_tracker` | 180 days |
| MI Resource Filters | `sys_mi_resource_filter` | Not stated |
| MI Resources | Not confirmed | Not stated |
[Table 3. Tables behind the Machine Identity Console]

{#explore-machine-identity-console__table_mic_tables}

## Resource filters {#explore-machine-identity-console__mic_resource_filters}

The MI Resource Filters table lists the APIs that the Machine Identity Console can collect data for. The Collect column shows whether an API is collected.
{#explore-machine-identity-console__table_mic_resource_filters__entry__5}

| API name | Resource | Type | Method | Collect |
|-|-|-|-|-|
| now/amb | ALL | REST | ALL | false |
| now/checklist | ALL | REST | ALL | false |
| now/delegation | ALL | REST | ALL | false |
| now/graphql | ALL | REST | ALL | false |
| now/guidedtour | ALL | REST | ALL | false |
| now/ldap | ALL | REST | ALL | false |
| now/live_feed | ALL | REST | ALL | false |
| now/map | ALL | REST | ALL | false |
| now/mobileapp | ALL | REST | ALL | false |
| now/push | ALL | REST | ALL | false |
| now/ua | ALL | REST | ALL | false |
| now/ui | ALL | REST | ALL | false |
| now/vtb | ALL | REST | ALL | false |
| sn_codesearch/code_search | ALL | REST | ALL | false |
| sn_devstudio/vcs | ALL | REST | ALL | false |
| sn_kmf/signature | ALL | REST | ALL | false |
[Table 4. MI Resource Filters (sample)]

{#explore-machine-identity-console__table_mic_resource_filters}
**Related concepts**   

* [Security findings](https://www.servicenow.com/docs/JTKVZ5ylup3Xab_DL4BKDg "Provides Machine Identity security score and findings.")
* [Metrics](https://www.servicenow.com/docs/Mh_SM0EJv3~FLnclUo~pUA "Metrics of the machine identities.")
* [Inbound integrations](https://www.servicenow.com/docs/0JS6ELRl4VIFzylonHaNRw "Inbound Integrations in the machine identity console allows you to configure and manage external applications to access ServiceNow APIs.")  
**Related tasks**   

* [Activating Machine Identity Console](https://www.servicenow.com/docs/0znrBkE3adqjW4cfgVlPKA "Activate the Machine Identity Management com.glide.identity.machine_identity_management to manage your service accounts which are used for integrations with ServiceNow.")
* [Machine Identity Console Settings](https://www.servicenow.com/docs/Aj7RmnPjGudScsy8unBwGw "Configure the Machine Identity security score settings.")