Enable external users to access attachments

Enable users who have been assigned the snc_external role to be able to view, upload, and download attachments on their ServiceNow mobile app.

Before you begin

Role required: admin

About this task

When you assign the snc_external role to users who are external to your organization, they can't access resources with their ServiceNow mobile app unless explicitly enabled. For more information about the snc_external role, see Explicit Roles.

You can use the mobile property allow_snc_external_attachment_access to remove restrictions on attachments for users assigned the snc_external role. When the allow_snc_external_attachment_access mobile property is set true, external users can use the mobile offline mode and access attachments from the following components and locations:

• Activity streams
• Legacy parameter screen (UI parameters), Quebec and earlier
• Input form screen (sys_sg_parameter_screen table), Rome and later
• Details screen using the Attachment list
• Offline mode

The allow_snc_external_attachment_access mobile property is turned off by default and external users can't access attachments.

Mobile properties are configured as records in the sys_sg_properties table on the ServiceNow Mobile Platform server. The ServiceNow instance sends the mobile property to mobile apps after authentication. Then the property turns on or turns off a feature on the mobile app.

Procedure

1. Navigate to All > sys_sg_properties.list.
   The Mobile Properties list appears.
2. In the Mobile Properties list, select New.
3. On the form, fill in the fields.

   Table 1. Mobile properties new record form

   Field	Description
   Name	Name of the mobile property record. Enter allow_snc_external_attachment_access to make this feature configurable. The allow_snc_external_attachment_access property is turned off by default and you must create it on your instance to configure it. It isn't visible on the instance until you create it. Note: The record name is case-sensitive and must be entered as allow_snc_external_attachment_access.
   Application	Application scope where the mobile property is applied. To select a different application scope, select the globe icon () on the instance banner. Then select Application scope: application_scope. For information about how mobile properties are affected by application scope, see Mobile properties.
   Description	Description of the mobile property. Enter a description of the property. For example, Determines whether users in the snc_external role can access attachments.
   Type	Data type of the mobile property record. Select True/False for the allow_snc_external_attachment_access mobile property.
   Value	Enter one of the following options: To enable external users to access attachments, enter True. To prevent external users from accessing attachments, enter False.
   Active	Whether the mobile property is activated. If the check box is cleared, the mobile property isn't activated for use.
   Is Public	Determines whether the pre_auth property is included in the API response. By default, this option is not selected. If you want this property included in the /pre_auth API response, select this checkbox. For more information, see Adaptive Authentication Events. Mobile properties with this checkbox enabled are excluded from the /user_client API response.
   Mobile App Config	Mobile app configuration for which you want to use the mobile property. This setting limits the mobile property behavior to users who have access to this mobile app configuration. Other external users don't have access to this mobile property and instead experience default behavior so they can't access attachments. To enter a value, either start typing the configuration name or select the search icon. The search dialog box lists the configurations from which you can choose. Select a configuration in the Mobile app configs dialog box.
   Mobile Application	Mobile application to which you want to send the mobile property. This setting limits the mobile property behavior to users who have access to this mobile app. Other external users don't have access to this mobile property and instead experience default behavior so they can't access attachments. To enter a value, either start typing the application name or select the search icon. The search dialog box lists the applications from which you can choose. Select an application in the Mobile Applications dialog box.

4. Select Submit.

What to do next

After updating this property, the end user must pull to refresh on the launcher screen to get the latest feature configurations.