Use Scripting Governance Tool

Use the Scripting Governance Tool to provide a single, centralised control for managing scripting access across your ServiceNow AI Platform.

Before you begin

Role required: security_admin

Important:

You must have elevate your role security_admin. See Elevate to a privileged role.

The Scripting Governance Tool helps you review user scripting governance your ServiceNow AI Platform. The Conditional Script Writer group grants scripting permissions to its members via the snc_required_script_writer_permission role. Users are added to the group by either an automated assignment or manual configuration. You can manage both of these settings from the Scripting Governance Tool.

Procedure

1. Navigate to All > System Security > Scripting Governance Tool.
2. Use the following features to learn more:

   Table 1. Scripting Governance Tool

   Features	Description
   Users in Conditional Script Writer Group	Displays the number of users in the Conditional Script Writer group. These users are granted the snc_required_script_writer_permission until removed from the group.
   Auto-assignment	Auto-assignment assigns new users to the Conditional Script Writer group if the users are internal users and has one functional role. You can select the slider to de-activate. Note: It is recommended to de-activate auto-assignment.
   Scan for users who have scripted (Recommended)	Scans for users in the ServiceNow AI Platform who have modified records containing script fields such as business rules, script includes, or client scripts. When running the scan, you can define a time period for which the scan checks.
   Manual Configuration	You can manually select users that stay in the Conditional Script Writer group. Select the Manage scripting access button and enter the users into the text field for manually managing the user removal process from the Conditional Script Writer group.
   Groups containing a scripting role	Displays the number of groups that contain a scripting role. By default the Conditional Script Writer group has a scripting role. Note: It is recommended to manage scripting access exclusively through the Conditional Script Writer group. Adding the snc_required_script_writer_permission role as a child role to other roles or groups reduces your ability to centrally control who can script on your instance.
   Roles containing a scripting role	Displays the number of roles that contain a snc_required_script_writer_permission role. Note: It is recommended to manage scripting access exclusively through the Conditional Script Writer group. Adding the snc_required_script_writer_permission role as a child role to other roles or groups reduces your ability to centrally control who can script on your instance.
   View scans	After you run the scan, the details of the scan are displayed on the View scans.
   View removals	When you schedule for removal of user from the Conditional Script Writer group, the details are displayed on the View removals.

   
   
   

Result

You can view the following topics to understand how you can:

• Scan for users who have scripted
• Remove users from the Conditional Script Writer group