Configure Service Graph Connector for Wiz using SGC Central

  • Release version: Australia
  • Updated March 12, 2026
  • 3 minutes to read

    • Set up scheduled import jobs to pull in data from a Wiz project into your Configuration Management Database (CMDB).

    Before you begin

    • Install Service Graph Connector for Wiz version 1.3.0 or later from the ServiceNow Store. For ServiceNow Store installation steps, see Install a ServiceNow Store application.
    • You must obtain the OAuth credentials associated with the Wiz service account and make a note of the following details:
      • Client ID
      • Client secret
      • OAuth token URL
      • Connection URL
      For more information, see Set up the Wiz environment.
    • You must have the following permissions for the Wiz service account:
      • read:resources
      • read:projects
    Role required: The following table shows the roles required for each stage of the playbook.
    Table 1. Role required for each playbook stage
    Stage Role
    Prerequisites admin
    Setup cmdb_inst_admin or admin

    About this task

    The playbook experience for onboarding connectors is activated with SGC Central in the Service Graph Workspace or CMDB Workspace. To configure the SGC Central application, see Configuring SGC Central and for more information on how to interact with a playbook, see Interact with Playbook.

    Procedure

    1. Use one of the following methods to open SGC Central:
      • Navigate to Workspaces > Service Graph Workspace, and from the left navigation panel, select the Ingestion icon to open the SGC Central view.
      • Navigate to Workspaces > CMDB Workspace > SGC Central.
    2. On the Overview page, select Create connection.
      Tip:
      Alternatively, you can select Create connection on the All connections page.
    3. On the Create connection window, select the Wiz connector type, and then select Configure connection.
      A default connection, SG-Wiz, for Wiz is available within the application. As the Service Graph Connector for Wiz supports only a single instance, you can configure the default connection for the first time or resume editing it thereafter.
    4. Complete the initial prerequisites when setting up a connection for the first time using a connector.
      Note:
      This step is required when configuring the connector for the first time only. See Perform initial setup tasks when creating a connection in SGC Central.
    5. Enter connection details and test the API connection for importing Wiz data.
      1. In the Setup stage of the playbook, select the Create and test connection activity.
      2. On the form, fill in the fields.
        Table 2. Create and test connection form
        Field Description
        Connection name Name to identify the Wiz connection record.
        Connection URL Base URL to connect to your Wiz application.
        Note:
        Based on the region of your Wiz application, enter the connection URL in the following format: 
        https://api.<region>.app.wiz.io
        Where <region> is the region where the Wiz tenant is located. For example, us1, us2, eu1, or eu2.
        Client ID Client ID of your Wiz application as described in Before you begin.
        Client secret Client secret of your Wiz application as described in Before you begin.
        OAuth token URL Token generation URL. This field is automatically set to the following URL:
        https://auth.app.wiz.io/oauth/token
      3. Select Update and test connection.
      4. Once the connection test is complete, select Continue.
    6. Optional: Configure properties of the connector to access resources.
      Note:
      To skip this step, select Continue for the Set configuration properties activity.
      1. In the Setup stage of the playbook, select the Set configuration properties activity.
      2. On the form, fill in the fields.
        Table 3. Configuration properties
        Field Description
        Projects List of project IDs for which the resources are to be imported.

        Separate multiple entries with a comma.
        Exclude projects List of project IDs for which the resources are excluded only when the Projects property isn’t set. In this case, all the resources except for the specified projects are imported.

        Separate multiple entries with a comma.
      3. Select Continue.
    7. Configure the import schedule to import data at regular intervals.
      1. In the Setup stage of the playbook, select the Configure import schedule activity.
      2. Expand the Parent scheduled data import within the Import schedules list to select the SG-Wiz-Organization import schedule.
      3. Select the Active check box, and then fill in the run schedule and time details.

        For more information, see Schedule a data import.

      4. Select Save.
        Alternatively, select Execute Now to execute the import schedule immediately.
    8. Optional: Enable the Reset Last Run Datetime for SG-Wiz script to retrieve full data periodically.
      Note:
      To skip this step, select Skip for the Enable full data retrieval activity.
      1. In the Setup stage of the playbook, select the Enable full data retrieval activity.
      2. Select the Active check box, and then fill in the run schedule and time details.
        Note:
        When active, the script clears the Last Run Date Time field value in a data source, ensuring that the SG-Wiz Organization scheduled job retrieves all Wiz-related data sources periodically.
      3. Select Continue.
    9. In the Setup stage of the playbook, select the Confirm connection creation activity to verify whether the connection was created.

    What to do next

    Select View all connections to review the connection details. The created connection appears in the Installed connections list.