Service Graph Connector for Microsoft Azure

  • Release version: Washingtondc
  • Updated July 19, 2025
  • 5 minutes to read

    • Use the Service Graph Connector for Microsoft Azure to pull data from Microsoft Azure into your CMDB.

    Request apps on the Store

    Visit the ServiceNow Store website to view all the available apps and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the ServiceNow Store version history release notes.

    Supported versions

    Supported ServiceNow versions:
    • Washington DC
    • Xanadu
    • Yokohama
    • Zurich

    Use cases

    The following are examples on how you can use the Service Graph Connector:
    • Visibility into cloud resources, relationships, and state in near real-time.
    • Service ITAM/SAM outcomes through deep discovery of applications.

    Configuring a connection for the connector

    You can configure a connection for the connector by using the SGC Central view in the CMDB Workspace. The view enables you to discover and install connectors, and then effectively manage the full life cycle of creating, editing, monitoring, and debugging connections. To configure the connector using SGC Central, see Configure Service Graph Connector for Microsoft Azure using SGC Central.
    Important:
    Unless there are configuration issues, use the SGC Central view in the CMDB Workspace to configure the connection for the connector, as the guided setup method is being deprecated.

    CMDB integrations dashboard

    The Integration Commons for CMDB store app provides a dashboard with a central view of the status, processing results, and processing errors of all installed integrations. You can see metrics for all integration runs. You can filter the view to a specific CMDB integration, a specific time duration, or a specific integration run. For more details about monitoring Microsoft Azure integrations in the CMDB Integrations Dashboard, see Using the CMDB Integrations Dashboard.

    Data mapping

    Data from the Azure data sources is mapped and transformed into the ServiceNow CMDB Configuration Item (CI) class definitions using the Robust Transform Engine (RTE). Data is inserted into the ServiceNow® CMDB using the Identification and Reconciliation Engine (IRE).

    When you complete setting up the connection, you can configure the integration to periodically pull data from Azure. The data is loaded into staging tables and then inserted into the target tables.

    The following table lists the data sources, the staging tables, and the target tables as CMDB CI and non-CMDB classes for Azure.
    Table 1. Data mapping for Azure
    Data source Staging table Target tables
    SG-Azure Subscriptions SG Azure Subscriptions [sn_sg_azure_integ_subscriptions]

    Cloud Service Account

    Key Value
    SG-Azure Datacenter Updation SG-Azure Datacenter Updation [sn_sg_azure_integ_datacenter_updation]

    Azure Datacenter
    SG-Azure Resource Group SG-Azure Resource Group [sn_sg_azure_integ_resource_groups]

    Resource Group

    Key Value
    SG-Azure Availability Zone SG-Azure Availability Sets [sn_sg_azure_integ_availability_sets]

    Availability Zone

    Key Value
    SG-Azure Storage Volume SG-Azure Storage Volume [sn_sg_azure_integ_storage_volume]

    Storage Volume

    Key Value
    SG-Azure Load Balancers SG-Azure Load Balancers [sn_sg_azure_integ_load_balancers]

    Cloud Load Balancer

    Cloud LB IPAddress

    Key Value
    SG-Azure Network SG-Azure Network [sn_sg_azure_integ_network]

    Cloud Network

    Cloud Service Account

    Cloud Subnet

    Key Value
    SG-Azure Public IP Address SG-Azure Public IP Address [sn_sg_azure_integ_public_ip_address]

    Cloud Public IP Address

    Cloud Mgmt Network Interface

    Cloud Load Balancer

    Cloud LB IPAddress

    Key Value
    SG-Azure Security Group SG-Azure Security Group [sn_sg_azure_integ_security_group]

    Compute Security Group

    Key Value
    SG-Azure Storage Accounts SG-Azure Storage Accounts [sn_sg_azure_integ_storage_accounts]

    Cloud Storage Account

    Key Value
    SG-Azure Virtual Machines SG-Azure Virtual Machine [sn_sg_azure_integ_virtual_machine]

    Virtual Machine Instance

    Image

    Linux Server

    Server

    Windows Server

    Key Value
    SG-Azure Network Interface SG-Azure Network Interface [sn_sg_azure_integ_network_interface]

    Cloud Mgmt Network Interface

    IP Address

    Hardware

    Virtual Machine Instance

    Key Value
    SG-Azure SQL SG-Azure SQL [sn_sg_azure_integ_sql]

    Cloud DataBase

    Key Value
    SG-Azure Functions SG-Azure Functions [sn_sg_azure_integ_functions]

    Cloud Function
    SG-Azure Generic Resources SG-Azure Generic Resources [sn_sg_azure_integ_generic_resources]
    Note:
    The SG-Azure Generic Resources data source imports data for generic resources that aren't tracked by other data sources.

    Cloud Resource

    Key Value
    SG-Azure Scale Sets SG-Azure Scale Sets [sn_sg_azure_integ_scale_sets]

    Instance Scale Set
    SG-Azure Scale Sets VMs SG-Azure Scale Sets VMs [sn_sg_azure_integ_scale_sets_vms]

    Virtual Machine Instance

    Storage Volume

    Image

    Cloud Mgmt Network Interface

    Hardware Type

    Azure Datacenter

    Linux Server

    Server

    Windows Server

    Key Value
    SG-Azure Software SG-Azure Software [sn_sg_azure_integ_software]
    Note:
    The SG-Azure Software data source imports the software data from the ConfigurationData table in the Log Analytics workspace of Azure.

    The SG-Azure Software import is set to inactive by default.

    When the Software Asset Management (SAM) application isn't installed:

    Software

    Software Instance

    When the SAM application is installed:

    Software Installation
    SG-Azure Software Remove SG-Azure Software Remove [sn_sg_azure_integ_software_remove]

    The SG-Azure Software Remove import is set to inactive by default.

    When the SAM application isn't installed:

    Software

    Software Instance

    When the SAM application is installed:

    Software Installation
    SG-Azure TCP SG-Azure TCP [sn_sg_azure_integ_tcp]
    Note:
    The SG-Azure TCP data source imports the TCP and processes data from the VMConnection and VMProcess tables in the Log Analytics workspace of Azure. To populate the tables, you must first enable the VM insights feature in the Azure portal. For more information, see Enabling VM insights for collecting Azure data.

    TCP Connection

    Running Process
    SG-Azure Hardware Template Updation​ Hardware templates [sn_sg_azure_integ_hardware_templates]

    Hardware Type
    SG-Azure HW Consolidation SG-Azure HW Consolidation [sn_sg_azure_integ_hw_consolidation]

    Virtual Machine Instance

    Computer
    SG-Azure Run Command SG-Azure Run Command [sn_sg_azure_integ_run_command]

    No data created
    SG-Azure Get Run Command SG-Azure Get Run Command [sn_sg_azure_integ_get_run_command]

    Application

    TCP Connection

    Running Process
    SG-Azure Kubernetes Cluster SG-Azure Kubernetes Cluster [sn_sg_azure_integ_kubernetes_cluster]

    Kubernetes Cluster
    Note:
    • The connector utilizes the Service Graph Resource Inclusion Whitelist [sn_cmdb_int_util_service_graph_resource_inclusion_whitelist] table to differentiate between generic and other supported resource types.

      The connector first populates all supported resources in the Service Graph Resource Inclusion Whitelist [sn_cmdb_int_util_service_graph_resource_inclusion_whitelist] table. These resources, categorized under their respective supported resource types, have specific data sources designated for ingestion within the connector. When the SG-Azure Generic Resources data source is executed and retrieves unsupported resource types, they are added to the Service Graph Resource Inclusion Whitelist [sn_cmdb_int_util_service_graph_resource_inclusion_whitelist] table and categorized as generic.

    • Starting with the Service Graph Connector for Microsoft Azure 1.12.0 version, the SG-Azure Hardware Template Updation and SG-Azure HW Consolidation import schedules replace the SG-Azure Hardware Template import schedule. The SG-Azure Hardware Template Updation and SG-Azure HW Consolidation data sources fetch only the data of the hardware templates that are used for VMs in Azure, instead of fetching all hardware templates.
    For more information on where data is saved when pulling data from Azure, see CMDB classes targeted in Service Graph Connector for Microsoft Azure and Supported Microsoft Azure resource types.

    You can use the IntegrationHub ETL app to view the data maps. See IntegrationHub ETL for more information.

    Additional resource

    How do I configure the Azure Service Graph Connector?