---
sourceDocument: Australia ServiceNow AI Platform Capabilities
sourceDocumentLink: https://www.servicenow.com/docs/r/australia/servicenow-platform

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia ServiceNow AI Platform Capabilities

ft:clusterId :

    - platcap

bundleId :

    - platcap

workflow :

    - Platform


---

# Configure the Tanium environment

# Configure the Tanium environment for the Service Graph Connector for Tanium Atlas Endpoints {#ariaid-title1}

Release version: Australia  
Updated November 5, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Configure your Tanium environment to import data using the Service Graph Connector for Tanium Atlas Endpoints.

## Before you begin

Role required: Tanium administrator

## About this task

The Service Graph Connector for Tanium Atlas Endpoints authenticates to Tanium using an API token. To follow Tanium's security best practices, the token must be bound to an identity that has only the roles required by the integration---not a privileged administrator account. For more information, see [Creating API tokens for ServiceNow](https://help.tanium.com/bundle/Security-Operation-Integration/page/ServiceNow_Integrations/Create_API_key.htm).{#sgc-cmdb-tanium-endpoints-configure-task__table_crm_ps3_njc__entry__2}

| Identity | Description |
|-|-|
| Service account (recommended) | Default identity. Provides the cleanest separation of integration permissions from human users. |
| Persona | Use this identity only if your organization doesn't permit dedicated service accounts. |
[Table 1. Options for creating an identity]

{#sgc-cmdb-tanium-endpoints-configure-task__table_crm_ps3_njc}

After you configure an identity, create an API token. Provide the resulting API token to the ServiceNow administrator who sets up the Service Graph Connector for Tanium Endpoints.

## Procedure

1. Configure an identity for binding the API token that is used by the Service Graph Connector for Tanium Atlas Endpoints:
   * [Configure a service account](https://www.servicenow.com/docs/eOJPKPE4fV5nmjRtV~ipiA "Create a service account to bind the API token that is used by the Service Graph Connector for Tanium Atlas Endpoints. If a service account for the integration already exists, edit it to assign the required roles.") (default identity)
   * [Configure a persona](https://www.servicenow.com/docs/D7lMImBpmDQ1Mjkagj488A "Create a persona to bind the API token that is used by the Service Graph Connector for Tanium Atlas Endpoints. If a persona for the integration already exists, edit it. Use a persona only if a service account isn't permitted by your organization.") (alternative identity; to be used only when a service account is not permitted)

   Create an identity that has only the roles required by the integration.
2. [Create an API token](https://www.servicenow.com/docs/LR0rlggAc7pc5BKS~Msesg "Create an API token to be used by the Service Graph Connector for Tanium Atlas Endpoints.")  
   After configuring the identity (service account or persona), generate the API token to be used by the Service Graph Connector for Tanium Atlas Endpoints.