Granting table access to a user in ServiceNow

This article explains how to grant table access to a service account in ServiceNow. The process involves creating a role, assigning it to a user, and configuring row-level and field-level access controls.

Prerequisites

• Ensure you have admin access in ServiceNow.
• Elevate to the security_admin role to make changes to Access Control Lists (ACLs).

Get started

Create a user

1. Navigate to User Administration > Users.
2. Click New to create a new user.
3. Fill in the user details, such as microsoft.copilot for the User ID and Microsoft and Copilot for the First Name and Last Name respectively.
4. Click Submit to save the user.

Create a role

1. Navigate to User Administration > Roles.
2. Click New.
3. Enter a unique name for the role (e.g., Copilot connector account).
4. Click Submit to save the role.

Assign the role to a user

1. Navigate to User Administration > Users.
2. Open the user record for the intended user (e.g., Microsoft Copilot).
3. In the Roles related list, click Edit.
4. Add the newly created role (Microsoft Graph Connector Account).
5. Click Save to finalize the assignment.
6. Click on Update to update the user record.

Grant row-level access

To grant access to rows within a specific table, follow these steps:

1. Elevate to the security_admin role.
2. Navigate to System Security > Access Control (ACL).
3. Click New to create a new ACL record.
4. Fill in the following fields:
   • Type: Select record.
   • Operation: Choose the 'read' operation.
   • Name: Enter the table name (e.g., sys_dictionary).
5. In the Roles section, add the previously created role (Microsoft Graph Connector Account).
6. Click Submit to save the ACL.

Verification

1. Impersonate the user (e.g., Microsoft Copilot).
2. Access the target table (e.g., sys_dictionary) and confirm that rows are visible. You will notice that though the user can view the rows, the field values are not visible. To grant field-level access, proceed to the next step.

Grant field-level access

If the user can view rows but not field values, field-level access must be configured.

1. Navigate to System Security > Access Control (ACL).
2. Click New to create a new ACL record.
3. Fill in these fields:
   • Type: Select record.
   • Operation: Choose the 'read' operation.
   • Name: Enter the table name (e.g., sys_dictionary) and use * in the field name to apply to all fields.
4. In the Roles section, add the previously created role (Microsoft Graph Connector Account).
5. Click Submit to save the ACL.

Final verification

1. Impersonate the user (e.g., Microsoft Copilot).
2. Confirm that both rows and field values within the target table are now visible.

By following these steps, you have successfully granted table access to a service account in ServiceNow.