License key discovery and access control tables
Summarize
Summary of License key discovery and access control tables
This content describes the tables, fields, access controls, and scheduled job related to license key discovery in the Agent Client Collector for Visibility within ServiceNow's Yokohama release. It is designed to help ServiceNow customers understand how license keys are collected from managed endpoints, stored, and accessed securely.
Show less
Key Features
- License Key Discovery Tables:
- License Registry Configuration (snaccviscontentlicenseregistryconfig): Stores admin-defined registry paths and value names to collect license keys from endpoints.
- License Keys (snaccviscontentlicensekeys): Stores discovered license key values and related metadata from devices.
- License Keys Table Fields: Includes device (CI), associated SAM product, user assigned to device, configuration rule used for discovery, exact registry path, discovered key value, last scan date, and an "Absent" flag for keys no longer found (records are never deleted).
- License Registry Configuration Fields: Contains SAM product, registry path and value name to be read, an auto-generated name from product and value name, description notes, and an active flag controlling inclusion in future collections. The combination of product, registry path, and value name must be unique.
- Access Control: Roles control access to these tables:
- ACC application admin: full access to License Registry Configuration, read-only to License Keys.
- Discovery admin: full access to License Registry Configuration, read-only to License Keys.
- SAM admin: read-only access to both tables.
- All other roles: no access.
- Scheduled Job: A daily scheduled job runs at 8:30 a.m. UTC to refresh the License Key Config File, conditional on license key discovery being enabled and the SAM Professional plugin being activated.
Key Outcomes
ServiceNow customers can use this capability to automatically discover and track software license keys from endpoint devices by specifying registry locations to monitor. The structured storage of keys with metadata supports accurate license management and compliance. Role-based access controls ensure that only authorized users can view or modify license discovery configurations and data. The scheduled job automates updates to the discovery configuration, maintaining up-to-date collection rules.
Reference information for the tables, fields, access control, and scheduled job used by license key discovery in Agent Client Collector for Visibility Content.
Tables
License key discovery uses the following tables.
| Table | Label | Purpose |
|---|---|---|
| sn_acc_vis_content_license_registry_config | License Registry Configuration | Admin-managed list of registry paths and value names to collect from managed endpoints. |
| sn_acc_vis_content_license_keys | License Keys | Stores the license key values collected from endpoint devices. |
License Keys table fields
The License Keys [sn_acc_vis_content_license_keys] table stores the following fields for each discovered key.
| Field | Description |
|---|---|
| Configuration Item | Device the key was collected from. Table: cmdb_ci_computer. |
| Product | SAM product associated with this key. Table: samp_sw_product. |
| User | This field is automatically set to the user assigned to the CI. Table: sys_user. |
| License Key Config | Configuration rule that discovered this key. Table: sn_acc_vis_content_license_registry_config. |
| Resolved Registry Path | Exact registry path the key was read from on the endpoint. |
| License Key | Discovered key value. |
| Last Scanned | Date the key was last detected by the agent. |
| Absent | Selected when the key is no longer found on the device. Records are never deleted, they are marked Absent instead. |
License Registry Configuration form fields
The following table describes the fields in the License Registry Configuration [sn_acc_vis_content_license_registry_config] table.
| Field | Description |
|---|---|
| Product | SAM product this license key belongs to. Links to the SAM Professional product catalog. |
| Registry Path | Windows registry path where the key is stored. For example, HKLM\SOFTWARE\Microsoft\Office\16.0\Registration. |
| Registry Value Name | Specific registry value to read. For example, DigitalProductId. |
| Name | This field is automatically set to a combination of the Product and Registry Value Name values. |
| Description | Notes about this configuration record. |
| Active | Indicator of whether this record is included in future collections. Clearing this check box removes the record from future collections. |
Access control
The following table shows which roles can access each license key discovery table.
| Role | License Registry Configuration table | License Keys table |
|---|---|---|
| ACC application admin (agent_client_collector_admin) | Read, write, create | Read only |
| Discovery admin (discovery_admin) | Read, write, create | Read only |
| SAM admin (sam_admin) | Read only | Read only |
| All other roles | No access | No access |
Scheduled job
The following scheduled job supports license key discovery.
| Job | Schedule | Condition |
|---|---|---|
| Refresh License Key Config File | Daily at 8:30 a.m. UTC | Runs only when the sn_acc_vis_content.enable_license_key_discovery property is set to true and the SAM Professional plugin (com.snc.samp) is activated. |