ATTRIBUTE TYPE REFERS TO DESCRIPTION
ATTRIBUTE TYPE REFERS TO DESCRIPTION
appID string The unique identifier of Connected Application
riskLevel string The risk level associated with the Connected Application.
permissionsMetadata list<object> Metadata for each permission associated with the Connected Application.
 name string Name of the permission.
 riskLevel string Risk level of the permission.
 firstSeenTime number Timestamp when the permission was first seen.
 removedTime number Timestamp when the permission was removed (0 if not removed).
 riskScore number Risk score of the permission. Not present when riskLevel is Unknown.
connectedAppName string Name of the Connected Application.
riskScore number The risk score associated with the Connected Application.
ATTRIBUTE TYPE REFERS TO DESCRIPTION
ATTRIBUTE TYPE REFERS TO DESCRIPTION
type string The type OAuth grant like Access Token, Refresh Token, Authorization Code, etc.
sys_updated_by string User that last updated the associated OAuthCredential information.
sys_created_by string User that originally created the associated User record.
code_challenge string The code challenge associated with the OAuthCredential.
sys_id string Represents the resource id of the OAuthCredential.
scopes string The scope associated with OAuthCredential (usually useraccount).
peer.type string The type of the OAuthEntity to which access is authorized.
roles list<string> The roles of the user that corresponds to OAuthEntity(ConnectedApp) permissions.
expires number Data and time the grant to associated ConnectedApp expires.
login_method string The login method.
sys_updated_on number Data and time the associated OAuthCredential information was updated.
oauth_requestor_profile string The oauth requestor profile.
session_user string The session user.
peer object The associated OAuthEntity.
 link string Link to OAuthEntity.
 value string The ID of the resource oauth entity to which access is authorized.
sys_created_on number Data and time the associated OAuthCredential was originally created.
peer.name string The name of the OAuthEntity to which access is authorized.
last_access string The last access
requestor_id string The id of the requestor.
sys_mod_count string Number of times that the associated OAuthCredential record has been modified.
code_challenge_method string The method defined code challenge associated with the OAuthCredential.
sys_tags string The sys tags associated with the OAuthCredential.
user object The associated User.
 link string Link to User.
 value string The ID of the user on behalf of whom the client is authorized to access the resource.
ATTRIBUTE TYPE REFERS TO DESCRIPTION
ATTRIBUTE TYPE REFERS TO DESCRIPTION
ATTRIBUTE TYPE REFERS TO DESCRIPTION
sys_updated_by string User that last updated the associated OAuthEntity information.
certificate_url string url of the certificate.
salt string The salt value.
restricted_binding boolean Flag that indicates if the OAuthEntity has restricted binding.
auth_url string Auth url.
public_client boolean Indicates if the OAuthEntity is public_client or not.
sys_mod_count number Number of times that the associated OAuthEntity record has been modified.
access string Type of access
sys_updated_on number Data and time the associated OAuthEntity information was updated.
sys_created_on number Data and time the associated OAuthEntity was originally created.
send_client_credentials_as string The way the client credentails are sent like i request parameter or header.
comments string Comments on the associated OAuthEntity.
revoke_token_url string The revoke token url.
client_uuid string uuid of client.
sys_id string Represents the resource id of the OAuthEntity.
login_url string The login url.
name string Name of the OAuthEntity.
redirect_url string The redirect URLs authorization server redirect to. They must be absolute URLs and they are comma separated.
mobile_client boolean .
message_signature_lifespan number The lifespan of message signature.
user string .
type string The type of OAuthEntity.
default_grant_type string Indicates the default grant type.
active boolean Flag that indicates whether the OAuthEntity is active within the system.
sys_tags string The sys tags associated with the OAuthEntity.
sys_scope object The system scope.
 link string Link to system scope
 value string Value to system scope
token_url string The url of the token.
sys_created_by string User that originally created the associated User record.
id_token_lifespan number Value of the id token lifespan.
oauth_api_script string The oauth api script associated with the OAuthEntity.
code_challenge_method string The method defined code challenge associated with the OAuthEntity.
access_token_lifespan number Time in seconds the Access Token will be valid.
sys_policy string The system policy.
sys_name string Name of the OAuthEntity.
auth_code_lifespan number auth code lifespan associated with OAuthEntity.
sys_update_name string Concatenation of table name with id of the OAuthEntity.
refresh_token_lifespan number Time in seconds the Refresh Token will be valid.
refresh_token_url string Refresh token url.
protocol_name string Name of the protocol.
sys_class_name string Represents the table name.
skip_authorize boolean Flag that indicates whether authorization can be skipped.
use_mutual_auth boolean Flag that indicates the OAuthEntity uses mutual auth.
sys_package object The system system package.
 link string Link to system package
 value string Value to system package
logo_url string URL of the logo.
ATTRIBUTE TYPE REFERS TO DESCRIPTION
sys_created_on number Timestamp when the record was created.
sys_updated_on number Timestamp when the record was last updated.
sys_tags string Tags associated with the record.
sys_class_name string The class name of the authentication profile (e.g. sys_auth_profile_basic, sys_auth_profile_oauth2).
sys_scope object Application scope that owns this authentication profile.
 link string Link to system scope
 value string Value to system scope
sys_policy string Security policy applied to this authentication profile record.
name string The name of the authentication profile.
sys_id string Unique system identifier for the record.
sys_mod_count number Number of times this record has been modified.
sys_created_by string Username of the user who created the record.
sys_updated_by string Username of the user who last updated the record.
sys_package object The application package this authentication profile belongs to.
 link string Link to system package
 value string Value to system package
sys_update_name string Unique update name used to identify the record across instances.
sys_name string Display name of the record, typically matches the name field.
ATTRIBUTE TYPE REFERS TO DESCRIPTION
ATTRIBUTE TYPE REFERS TO DESCRIPTION
sys_id string Unique identifier for the processor record.
xframe_sameorigin boolean Indicates whether the X-Frame-Options header is set to SAMEORIGIN for this processor's responses.
sys_updated_on number Timestamp of the last update to this record.
path_endpoint string Specific endpoint path for this processor.
sys_tags string Tags associated with the record.
sys_update_name string Unique update name used to identify the record across instances.
require_csrf boolean Indicates whether CSRF token validation is required for requests to this processor.
sys_created_on number Timestamp of when this record was created.
sys_updated_by string Username of the user who last updated this record.
sys_created_by string Username of the user who created this record.
type string The type of processor (e.g. java, script).
path string URL path pattern that triggers this processor.
parameters string Parameters passed to this processor.
script string Script executed by this processor if type is script.
description string Description of the processor.
sys_name string Name of the processor.
active boolean Indicates whether this processor is active.
interactive boolean Indicates whether this processor is interactive (runs in the browser session context).
roles string Comma-separated list of roles required to access this processor. An empty string means the processor is publicly accessible without any role restriction.
sys_mod_count number Number of times this record has been modified.
class_name string Java class name for the processor if type is java.
params_endpoint string Endpoint for parameter handling.
name string Name of the processor.
sys_scope object Application scope that owns this processor.
 link string Link to system scope
 value string Value to system scope
sys_package object The application package this processor belongs to.
 link string Link to system package
 value string Value to system package
sys_policy string Security policy applied to this processor record.
ATTRIBUTE TYPE REFERS TO DESCRIPTION
ATTRIBUTE TYPE REFERS TO DESCRIPTION
ATTRIBUTE TYPE REFERS TO DESCRIPTION
sys_class_name string The name of the system class for this record, which indicates that it belongs to the sys_public table.
sys_update_name string This is a name that identifies the record during updates. It often combines the table name with the record sys_id.
sys_updated_by string The username of the individual who last updated the record.
sys_created_on number The timestamp of when the record was created.
sys_scope object This element indicates the scope of the record.
 link string A URL providing an API endpoint to access the scope details.
 value string The unique identifier of the scope
sys_tags string This field is used for tagging records. It can hold values that help categorize or identify records.
sys_id string A unique identifier for the record in the sys_public table.
sys_package object This element contains information about the package associated with this record.
 link string A URL that provides an API endpoint to access the package details.
 value string The unique identifier of the package
sys_name string The name of the public record. This value represents the record designation and can be used for display purposes.
sys_created_by string The username of the individual who created the record.
active boolean Indicates whether the record is currently active. If set to true, it means the public access is valid and currently in effect.
sys_updated_on number The timestamp of when the record was last updated.
page string Refers to the specific page or context where this public access applies.
sys_policy string Indicates the policy level of the record. A value of protected suggests that certain rules are in place to safeguard this record from unauthorized access or modification.
sys_mod_count number This represents the modification count for the record. It increments each time the record is updated. A value of 0 indicates that the record has not been modified since it was created.
ATTRIBUTE TYPE REFERS TO DESCRIPTION
ATTRIBUTE TYPE REFERS TO DESCRIPTION
controlled_by_refs string References to controlling ACL entries.
sys_scope object Application scope that owns this ACL rule.
 link string Link to system scope
 value string Value to system scope
sys_update_name string Unique update name used to identify the record across instances.
name string The name of the ACL rule.
operation object The operation controlled by this ACL (e.g. read, write, delete).
active boolean Indicates whether this ACL rule is currently active.
sys_id string Unique system identifier for the record.
sys_created_on number Timestamp when the record was created.
sys_updated_by string Username of the user who last updated the record.
advanced boolean Indicates whether the ACL uses an advanced script condition.
decision_type string The decision type of the ACL rule (e.g. allow, deny).
type object The type of object the ACL applies to (e.g. record, field).
script string Script that determines whether the ACL rule applies.
sys_updated_on number Timestamp when the record was last updated.
sys_created_by string Username of the user who created the record.
description string Description of the ACL rule.
admin_overrides boolean Indicates whether administrators can override this ACL rule.
sys_class_name string The class name of this ACL record.
applies_to string Specifies which records this ACL applies to.
sys_name string Display name of the record, typically matches the name field.
sys_tags string Tags associated with the record.
local_or_existing string Indicates whether the ACL is local or inherited from an existing rule.
sys_package object The application package this ACL rule belongs to.
 link string Link to system package
 value string Value to system package
sys_policy string Security policy applied to this ACL record.
condition string Condition expression that must evaluate to true for the ACL to apply.
sys_mod_count number Number of times this record has been modified.
ATTRIBUTE TYPE REFERS TO DESCRIPTION
ATTRIBUTE TYPE REFERS TO DESCRIPTION
active boolean Flag that indicates whether the User is active within the system
geolocation_tracked boolean Flag that indicates whether the contact location is obtained through geotracking.
internal_integration_user boolean If set to true can bypass WS-Security authentication while using SOAP interface
sys_created_on number Data and time the associated User was originally created.
sys_updated_by string User that last updated the associated User information.
default_perspective object The default perspective of the user
 link string Link to fetch the default_perspective resource
 value string ID of the default_perspective resource
source string Source of the user
sys_created_by string User that originally created the associated User record.
sys_id string Represents the resource id of the user
failed_attempts number Failed login attempts for the user
last_position_update string Date and time the last position was updated.
sys_mod_count number Number of times that the associated User record has been modified
vip boolean Flag that indicates whether the associated User has VIP status.
calendar_integration string Calendar application that the User uses. Ex: Outlook.
web_service_access_only boolean Flag that indicates whether the User can only access services through the web.
locked_out boolean Flag that indicates if the User is locked-out.
password_needs_reset boolean Does the users password need resetting
sys_domain object ServiceNow instance domain of the associated User record.
 link string Link to fetch the sys_domain resource
 value string Id of the sys_domain resource
enable_multifactor_authn boolean Flag that indicates whether multifactor authorization is required for the User to log in to the servicportal.
last_login_time number The time at which the user last logged in.
notification string Indicates whether the User should receive notifications. Valid values : Disabled, Enabled
name string Name of the user.
hashed_user_id string SHA-256 one-way hash of the sys_user_id.
ldap_server object Reference to LDAP Server table
 link string Link to fetch the ldap_server resource
 value string Id of the ldap_server resource
sys_domain_path string User record domain path.
sys_updated_on number Data and time the associated User information was updated.
user_name string User Name of the user.
email string Email of the user.
schedule object ID of the record that describes the work schedule for the associated User.
 link string Link to fetch the cmn_schedule resource
 value string Id of the cmn_schedule resource
time_sheet_policy string Time sheet policy for the associated contact
ATTRIBUTE TYPE REFERS TO DESCRIPTION
state string State of the role assignment
sys_id string Unique system identifier for the record
sys_updated_on number Data and time the associated User information was updated.
inherited boolean Indicates if the role is inherited
role object Role assigned to the user
 link string Link to role
 value string Value to role
sys_created_by string User who created the record
sys_created_on number Data and time the associated User was originally created.
sys_updated_by string User who last updated the record
included_in_role object Role in which this role is included
 link string Link to user has role
 value string Value to user has role
inh_map string Inheritance Map
sys_mod_count number Number of times the record was modified
user object User to whom the role is assigned
 link string Link to user
 value string Value to user
granted_by object User or role that granted this role to the user
 link string Link to User or role
 value string Value to User or role
included_in_role_instance object Role instance in which this role is included
 link string Link to role instance
 value string Value to role instance
inh_count number Inherited count if the role is inherited
ATTRIBUTE TYPE REFERS TO DESCRIPTION
ATTRIBUTE TYPE REFERS TO DESCRIPTION
includes_roles list<string> Roles included within this user role
sys_created_on number Data and time the associated User was originally created.
sys_package object Package associated with the record
 value string Value to system package
 link string Link to system package
assignable_by string Roles that can assign this user role
can_delegate boolean Indicates if users with this role can delegate tasks
description string Description or details of the user role
scoped_admin boolean Indicates if the user role has scoped administration privileges
sys_id string Unique system identifier for the record
sys_name string Name of the record
sys_scope object Scope associated with the user role.
 link string Link to system scope
 value string Value to system scope
sys_created_by string User who created the record
elevated_privilege boolean Indicates if the user role has elevated privileges
sys_update_name string User who last updated the record
suffix string Suffix or postfix for the user role
sys_mod_count number Number of times the record was modified
name string Name or label of the user role
sys_updated_on number Data and time the associated User information was updated.
sys_class_name string System class name of the record
sys_updated_by string User who last updated the record
grantable boolean Indicates if the user role can be granted to other users
sys_policy string Policy associated with the user role
ATTRIBUTE TYPE REFERS TO DESCRIPTION
ATTRIBUTE TYPE REFERS TO DESCRIPTION
ATTRIBUTE TYPE REFERS TO DESCRIPTION
sys_name string Name of the scripted REST service definition.
is_versioned boolean Indicates whether this REST service definition supports versioning.
enforce_acl string Comma-separated sys_ids of ACL records enforced on this service definition. Empty string means no ACLs are enforced.
sys_created_on number Timestamp of when this record was created.
sys_updated_by string Username of the user who last updated this record.
sys_created_by string Username of the user who created this record.
service_id string Unique identifier string for the REST service used in the URI namespace.
default_version string The default active version for this versioned REST service.
active boolean Indicates whether this REST service definition is active and its operations can be invoked.
produces_customized boolean Indicates whether the produced content types have been customized from defaults.
doc_link string URL to external documentation for this REST service.
consumes string Comma-separated list of content types this service accepts as input.
sys_scope object Application scope that owns this REST service definition.
 link string Link to system scope
 value string Value to system scope
sys_update_name string Unique update name used to identify the record across instances.
name string Name of the scripted REST service definition.
short_description string Brief description of the scripted REST service definition.
sys_id string Unique identifier for the scripted REST service definition record.
sys_updated_on number Timestamp of the last update to this record.
sys_tags string Tags associated with the record.
sys_package object The application package this REST service definition belongs to.
 link string Link to system package
 value string Value to system package
sys_policy string Security policy applied to this REST service definition record.
consumes_customized boolean Indicates whether the consumed content types have been customized from defaults.
sys_mod_count number Number of times this record has been modified.
base_uri string Base URI path for all operations in this REST service definition.
namespace string Namespace prefix used in the base URI for this REST service.
produces string Comma-separated list of content types this service can return.
ATTRIBUTE TYPE REFERS TO DESCRIPTION
ATTRIBUTE TYPE REFERS TO DESCRIPTION
produces_customized boolean Indicates whether the produced content types have been customized from defaults.
name string Name of the scripted REST operation.
http_method string HTTP method for this operation (e.g. GET, POST, PUT, DELETE).
sys_id string Unique identifier for the scripted REST operation record.
requires_acl_authorization boolean If true, ACL rules are evaluated for each request to this operation.
requires_snc_internal_role boolean If true, only users with an internal ServiceNow role can invoke this operation.
request_example string Example request body for this operation.
sys_policy string Security policy applied to this REST operation record.
requires_authentication boolean If true, callers must authenticate before invoking this operation. A value of false means the endpoint is publicly accessible without credentials.
produces string Comma-separated list of content types this operation can return.
sys_updated_on number Timestamp of the last update to this record.
sys_tags string Tags associated with the record.
sys_scope object Application scope that owns this REST operation.
 link string Link to system scope
 value string Value to system scope
sys_name string Name of the scripted REST operation.
consumes_customized boolean Indicates whether the consumed content types have been customized from defaults.
operation_script string Script executed when this REST operation is invoked.
web_service_version string Version of the REST service this operation belongs to.
sys_package object The application package this REST operation belongs to.
 link string Link to system package
 value string Value to system package
relative_path string Relative path of this operation within the parent REST service.
consumes string Comma-separated list of content types this operation accepts as input.
active boolean Indicates whether this REST operation is active and can be invoked.
sys_updated_by string Username of the user who last updated this record.
operation_uri string Full URI path for this operation.
default_operation_uri string Default URI path if no versioned URI is specified.
enforce_acl string Comma-separated sys_ids of ACL records enforced on this operation. Empty string means no ACLs are enforced.
web_service_definition object Reference to the parent scripted REST service definition that owns this operation.
 link string URL to access the parent service definition record via the REST API.
 value string sys_id of the parent scripted REST service definition.
sys_mod_count number Number of times this record has been modified.
sys_created_by string Username of the user who created this record.
short_description string Brief description of the scripted REST operation.
sys_update_name string Unique update name used to identify the record across instances.
sys_created_on number Timestamp of when this record was created.
ATTRIBUTE TYPE REFERS TO DESCRIPTION
ATTRIBUTE TYPE REFERS TO DESCRIPTION
type string The data type of the property value.
choices string Comma-separated values for a choice list.
is_private string If this property is true, ServiceNow will exclude this property from being imported via update sets. Keeping system properties private prevents settings in one instance from overwriting values in another instance. For example, you may not want a system property in a development instance to use the same value as a production instance.
write_roles string Defines the roles that have write access to this property.
read_roles string Defines the roles that have read access to this property.
name string The property name.
value string The property value.
number_value number The value as a number representation. This value will be populated if the value is of a numerical type. It can be utilized for writing NGL rules that numerical expression evaluation (i.e. greater than).