Revoke ServiceNow Admin Access

Identity Security Cloud (ISC) ISC Discussion and Questions
1

We need to revoke the admin access of the ServiceNow from IdentityNow , but we are not able to revoke them and it is throwing error insufficient privileges .
Do we need to any additional ACL (Access Control Lists) or permissions for the Service Account

2

I believe the connector doesn’t support it.

image
image822Ă—117 3.09 KB

3

Hi Sharvari,

In the release note here (What's New in ServiceNow - Compass). Add / remove entitlement is listed as supported. Not sure which one is correct.

4

@Vince777 - that’s specifically the SaaS-based connector; the one @sharvari is referring to is the connector that relies on Virtual Appliances. Do you know which one you’re using?

image
image2254Ă—782 73.9 KB

5

I’m using the one relies on Virtual Appliances. The connector on the SNOW side is also indicating automated revocation is supported (https://store.servicenow.com/sn_appstore_store.do#!/store/application/611872574fcc82004f167d2ca310c792/).

6

The VA-based connector doesn’t support it - Supported Features

That said, you could build a custom workflow that makes an API call to the ServiceNow API to deactivate accounts when an identity changes lifecycle states. You should work with your ServiceNow team to figure out the right table names and calls to make, but here’s a starting point - https://developer.servicenow.com/dev.do#!/reference/api/sandiego/rest/c_TableAPI#table-PATCH