ATTRIBUTE TYPE REFERS TO DESCRIPTION
ATTRIBUTE TYPE REFERS TO DESCRIPTION
appID string The unique identifier of Connected Application
riskLevel string The risk level associated with the Connected Application.
permissionsMetadata list<object> Metadata for each permission associated with the Connected Application.
 name string Name of the permission.
 riskLevel string Risk level of the permission.
 firstSeenTime number Timestamp when the permission was first seen.
 removedTime number Timestamp when the permission was removed (0 if not removed).
 riskScore number Risk score of the permission. Not present when riskLevel is Unknown.
connectedAppName string Name of the Connected Application.
riskScore number The risk score associated with the Connected Application.
ATTRIBUTE TYPE REFERS TO DESCRIPTION
ATTRIBUTE TYPE REFERS TO DESCRIPTION
last_access string The last access
login_method string The login method.
sys_id string Represents the resource id of the OAuthCredential.
peer object The associated OAuthEntity.
 link string Link to OAuthEntity.
 value string The ID of the resource oauth entity to which access is authorized.
sys_created_on number Data and time the associated OAuthCredential was originally created.
code_challenge string The code challenge associated with the OAuthCredential.
peer.name string The name of the OAuthEntity to which access is authorized.
expires number Data and time the grant to associated ConnectedApp expires.
sys_updated_on number Data and time the associated OAuthCredential information was updated.
oauth_requestor_profile string The oauth requestor profile.
type string The type OAuth grant like Access Token, Refresh Token, Authorization Code, etc.
session_user string The session user.
scopes string The scope associated with OAuthCredential (usually useraccount).
user object The associated User.
 link string Link to User.
 value string The ID of the user on behalf of whom the client is authorized to access the resource.
peer.type string The type of the OAuthEntity to which access is authorized.
requestor_id string The id of the requestor.
sys_mod_count string Number of times that the associated OAuthCredential record has been modified.
code_challenge_method string The method defined code challenge associated with the OAuthCredential.
sys_updated_by string User that last updated the associated OAuthCredential information.
sys_tags string The sys tags associated with the OAuthCredential.
sys_created_by string User that originally created the associated User record.
roles list<string> The roles of the user that corresponds to OAuthEntity(ConnectedApp) permissions.
ATTRIBUTE TYPE REFERS TO DESCRIPTION
ATTRIBUTE TYPE REFERS TO DESCRIPTION
ATTRIBUTE TYPE REFERS TO DESCRIPTION
oauth_api_script string The oauth api script associated with the OAuthEntity.
revoke_token_url string The revoke token url.
sys_policy string The system policy.
access string Type of access
login_url string The login url.
public_client boolean Indicates if the OAuthEntity is public_client or not.
sys_name string Name of the OAuthEntity.
protocol_name string Name of the protocol.
sys_class_name string Represents the table name.
send_client_credentials_as string The way the client credentails are sent like i request parameter or header.
token_url string The url of the token.
id_token_lifespan number Value of the id token lifespan.
sys_mod_count number Number of times that the associated OAuthEntity record has been modified.
code_challenge_method string The method defined code challenge associated with the OAuthEntity.
sys_updated_on number Data and time the associated OAuthEntity information was updated.
type string The type of OAuthEntity.
sys_created_on number Data and time the associated OAuthEntity was originally created.
default_grant_type string Indicates the default grant type.
auth_code_lifespan number auth code lifespan associated with OAuthEntity.
restricted_binding boolean Flag that indicates if the OAuthEntity has restricted binding.
access_token_lifespan number Time in seconds the Access Token will be valid.
auth_url string Auth url.
certificate_url string url of the certificate.
sys_scope object The system scope.
 value string Value to system scope
 link string Link to system scope
sys_created_by string User that originally created the associated User record.
salt string The salt value.
sys_package object The system system package.
 link string Link to system package
 value string Value to system package
refresh_token_lifespan number Time in seconds the Refresh Token will be valid.
refresh_token_url string Refresh token url.
redirect_url string The redirect URLs authorization server redirect to. They must be absolute URLs and they are comma separated.
active boolean Flag that indicates whether the OAuthEntity is active within the system.
sys_tags string The sys tags associated with the OAuthEntity.
use_mutual_auth boolean Flag that indicates the OAuthEntity uses mutual auth.
message_signature_lifespan number The lifespan of message signature.
client_uuid string uuid of client.
sys_id string Represents the resource id of the OAuthEntity.
sys_updated_by string User that last updated the associated OAuthEntity information.
skip_authorize boolean Flag that indicates whether authorization can be skipped.
sys_update_name string Concatenation of table name with id of the OAuthEntity.
mobile_client boolean .
comments string Comments on the associated OAuthEntity.
name string Name of the OAuthEntity.
user string .
logo_url string URL of the logo.
ATTRIBUTE TYPE REFERS TO DESCRIPTION
sys_package object The application package this authentication profile belongs to.
 link string Link to system package
 value string Value to system package
sys_name string Display name of the record, typically matches the name field.
sys_scope object Application scope that owns this authentication profile.
 link string Link to system scope
 value string Value to system scope
sys_policy string Security policy applied to this authentication profile record.
name string The name of the authentication profile.
sys_id string Unique system identifier for the record.
sys_mod_count number Number of times this record has been modified.
sys_updated_on number Timestamp when the record was last updated.
sys_updated_by string Username of the user who last updated the record.
sys_class_name string The class name of the authentication profile (e.g. sys_auth_profile_basic, sys_auth_profile_oauth2).
sys_update_name string Unique update name used to identify the record across instances.
sys_created_on number Timestamp when the record was created.
sys_created_by string Username of the user who created the record.
sys_tags string Tags associated with the record.
ATTRIBUTE TYPE REFERS TO DESCRIPTION
ATTRIBUTE TYPE REFERS TO DESCRIPTION
params_endpoint string Endpoint for parameter handling.
sys_tags string Tags associated with the record.
sys_update_name string Unique update name used to identify the record across instances.
sys_name string Name of the processor.
xframe_sameorigin boolean Indicates whether the X-Frame-Options header is set to SAMEORIGIN for this processor's responses.
require_csrf boolean Indicates whether CSRF token validation is required for requests to this processor.
name string Name of the processor.
class_name string Java class name for the processor if type is java.
sys_scope object Application scope that owns this processor.
 link string Link to system scope
 value string Value to system scope
sys_package object The application package this processor belongs to.
 link string Link to system package
 value string Value to system package
active boolean Indicates whether this processor is active.
roles string Comma-separated list of roles required to access this processor. An empty string means the processor is publicly accessible without any role restriction.
sys_updated_by string Username of the user who last updated this record.
sys_created_by string Username of the user who created this record.
script string Script executed by this processor if type is script.
sys_mod_count number Number of times this record has been modified.
sys_updated_on number Timestamp of the last update to this record.
sys_created_on number Timestamp of when this record was created.
description string Description of the processor.
type string The type of processor (e.g. java, script).
parameters string Parameters passed to this processor.
sys_policy string Security policy applied to this processor record.
sys_id string Unique identifier for the processor record.
interactive boolean Indicates whether this processor is interactive (runs in the browser session context).
path string URL path pattern that triggers this processor.
path_endpoint string Specific endpoint path for this processor.
ATTRIBUTE TYPE REFERS TO DESCRIPTION
ATTRIBUTE TYPE REFERS TO DESCRIPTION
ATTRIBUTE TYPE REFERS TO DESCRIPTION
sys_update_name string This is a name that identifies the record during updates. It often combines the table name with the record sys_id.
sys_package object This element contains information about the package associated with this record.
 link string A URL that provides an API endpoint to access the package details.
 value string The unique identifier of the package
sys_updated_by string The username of the individual who last updated the record.
sys_scope object This element indicates the scope of the record.
 link string A URL providing an API endpoint to access the scope details.
 value string The unique identifier of the scope
sys_policy string Indicates the policy level of the record. A value of protected suggests that certain rules are in place to safeguard this record from unauthorized access or modification.
active boolean Indicates whether the record is currently active. If set to true, it means the public access is valid and currently in effect.
sys_updated_on number The timestamp of when the record was last updated.
sys_name string The name of the public record. This value represents the record designation and can be used for display purposes.
sys_mod_count number This represents the modification count for the record. It increments each time the record is updated. A value of 0 indicates that the record has not been modified since it was created.
sys_created_on number The timestamp of when the record was created.
page string Refers to the specific page or context where this public access applies.
sys_created_by string The username of the individual who created the record.
sys_tags string This field is used for tagging records. It can hold values that help categorize or identify records.
sys_class_name string The name of the system class for this record, which indicates that it belongs to the sys_public table.
sys_id string A unique identifier for the record in the sys_public table.
ATTRIBUTE TYPE REFERS TO DESCRIPTION
ATTRIBUTE TYPE REFERS TO DESCRIPTION
name string The name of the ACL rule.
type object The type of object the ACL applies to (e.g. record, field).
script string Script that determines whether the ACL rule applies.
sys_id string Unique system identifier for the record.
sys_mod_count number Number of times this record has been modified.
sys_updated_on number Timestamp when the record was last updated.
advanced boolean Indicates whether the ACL uses an advanced script condition.
controlled_by_refs string References to controlling ACL entries.
admin_overrides boolean Indicates whether administrators can override this ACL rule.
description string Description of the ACL rule.
sys_class_name string The class name of this ACL record.
decision_type string The decision type of the ACL rule (e.g. allow, deny).
sys_scope object Application scope that owns this ACL rule.
 link string Link to system scope
 value string Value to system scope
local_or_existing string Indicates whether the ACL is local or inherited from an existing rule.
sys_package object The application package this ACL rule belongs to.
 value string Value to system package
 link string Link to system package
sys_policy string Security policy applied to this ACL record.
operation object The operation controlled by this ACL (e.g. read, write, delete).
active boolean Indicates whether this ACL rule is currently active.
condition string Condition expression that must evaluate to true for the ACL to apply.
applies_to string Specifies which records this ACL applies to.
sys_name string Display name of the record, typically matches the name field.
sys_tags string Tags associated with the record.
sys_created_on number Timestamp when the record was created.
sys_created_by string Username of the user who created the record.
sys_updated_by string Username of the user who last updated the record.
sys_update_name string Unique update name used to identify the record across instances.
ATTRIBUTE TYPE REFERS TO DESCRIPTION
ATTRIBUTE TYPE REFERS TO DESCRIPTION
notification string Indicates whether the User should receive notifications. Valid values : Disabled, Enabled
sys_id string Represents the resource id of the user
calendar_integration string Calendar application that the User uses. Ex: Outlook.
last_login_time number The time at which the user last logged in.
ldap_server object Reference to LDAP Server table
 link string Link to fetch the ldap_server resource
 value string Id of the ldap_server resource
sys_updated_on number Data and time the associated User information was updated.
active boolean Flag that indicates whether the User is active within the system
enable_multifactor_authn boolean Flag that indicates whether multifactor authorization is required for the User to log in to the servicportal.
sys_created_on number Data and time the associated User was originally created.
geolocation_tracked boolean Flag that indicates whether the contact location is obtained through geotracking.
last_position_update string Date and time the last position was updated.
locked_out boolean Flag that indicates if the User is locked-out.
password_needs_reset boolean Does the users password need resetting
sys_domain object ServiceNow instance domain of the associated User record.
 link string Link to fetch the sys_domain resource
 value string Id of the sys_domain resource
user_name string User Name of the user.
web_service_access_only boolean Flag that indicates whether the User can only access services through the web.
email string Email of the user.
failed_attempts number Failed login attempts for the user
internal_integration_user boolean If set to true can bypass WS-Security authentication while using SOAP interface
hashed_user_id string SHA-256 one-way hash of the sys_user_id.
schedule object ID of the record that describes the work schedule for the associated User.
 link string Link to fetch the cmn_schedule resource
 value string Id of the cmn_schedule resource
source string Source of the user
sys_domain_path string User record domain path.
default_perspective object The default perspective of the user
 link string Link to fetch the default_perspective resource
 value string ID of the default_perspective resource
name string Name of the user.
sys_updated_by string User that last updated the associated User information.
sys_created_by string User that originally created the associated User record.
sys_mod_count number Number of times that the associated User record has been modified
time_sheet_policy string Time sheet policy for the associated contact
vip boolean Flag that indicates whether the associated User has VIP status.
ATTRIBUTE TYPE REFERS TO DESCRIPTION
inh_map string Inheritance Map
sys_created_on number Data and time the associated User was originally created.
sys_created_by string User who created the record
user object User to whom the role is assigned
 link string Link to user
 value string Value to user
included_in_role object Role in which this role is included
 link string Link to user has role
 value string Value to user has role
state string State of the role assignment
sys_id string Unique system identifier for the record
sys_mod_count number Number of times the record was modified
sys_updated_on number Data and time the associated User information was updated.
granted_by object User or role that granted this role to the user
 link string Link to User or role
 value string Value to User or role
included_in_role_instance object Role instance in which this role is included
 value string Value to role instance
 link string Link to role instance
inherited boolean Indicates if the role is inherited
role object Role assigned to the user
 value string Value to role
 link string Link to role
sys_updated_by string User who last updated the record
inh_count number Inherited count if the role is inherited
ATTRIBUTE TYPE REFERS TO DESCRIPTION
ATTRIBUTE TYPE REFERS TO DESCRIPTION
grantable boolean Indicates if the user role can be granted to other users
sys_mod_count number Number of times the record was modified
name string Name or label of the user role
assignable_by string Roles that can assign this user role
sys_policy string Policy associated with the user role
sys_updated_on number Data and time the associated User information was updated.
includes_roles list<string> Roles included within this user role
sys_created_on number Data and time the associated User was originally created.
sys_scope object Scope associated with the user role.
 link string Link to system scope
 value string Value to system scope
elevated_privilege boolean Indicates if the user role has elevated privileges
sys_id string Unique system identifier for the record
sys_updated_by string User who last updated the record
sys_name string Name of the record
sys_update_name string User who last updated the record
can_delegate boolean Indicates if users with this role can delegate tasks
suffix string Suffix or postfix for the user role
sys_created_by string User who created the record
sys_package object Package associated with the record
 link string Link to system package
 value string Value to system package
description string Description or details of the user role
sys_class_name string System class name of the record
scoped_admin boolean Indicates if the user role has scoped administration privileges
ATTRIBUTE TYPE REFERS TO DESCRIPTION
ATTRIBUTE TYPE REFERS TO DESCRIPTION
ATTRIBUTE TYPE REFERS TO DESCRIPTION
sys_package object The application package this REST service definition belongs to.
 value string Value to system package
 link string Link to system package
is_versioned boolean Indicates whether this REST service definition supports versioning.
produces_customized boolean Indicates whether the produced content types have been customized from defaults.
sys_updated_on number Timestamp of the last update to this record.
doc_link string URL to external documentation for this REST service.
service_id string Unique identifier string for the REST service used in the URI namespace.
default_version string The default active version for this versioned REST service.
sys_tags string Tags associated with the record.
sys_update_name string Unique update name used to identify the record across instances.
sys_created_by string Username of the user who created this record.
produces string Comma-separated list of content types this service can return.
sys_scope object Application scope that owns this REST service definition.
 link string Link to system scope
 value string Value to system scope
sys_policy string Security policy applied to this REST service definition record.
sys_id string Unique identifier for the scripted REST service definition record.
active boolean Indicates whether this REST service definition is active and its operations can be invoked.
enforce_acl string Comma-separated sys_ids of ACL records enforced on this service definition. Empty string means no ACLs are enforced.
sys_created_on number Timestamp of when this record was created.
sys_updated_by string Username of the user who last updated this record.
base_uri string Base URI path for all operations in this REST service definition.
sys_name string Name of the scripted REST service definition.
consumes_customized boolean Indicates whether the consumed content types have been customized from defaults.
sys_mod_count number Number of times this record has been modified.
name string Name of the scripted REST service definition.
short_description string Brief description of the scripted REST service definition.
namespace string Namespace prefix used in the base URI for this REST service.
consumes string Comma-separated list of content types this service accepts as input.
ATTRIBUTE TYPE REFERS TO DESCRIPTION
ATTRIBUTE TYPE REFERS TO DESCRIPTION
web_service_version string Version of the REST service this operation belongs to.
relative_path string Relative path of this operation within the parent REST service.
web_service_definition object Reference to the parent scripted REST service definition that owns this operation.
 link string URL to access the parent service definition record via the REST API.
 value string sys_id of the parent scripted REST service definition.
sys_updated_on number Timestamp of the last update to this record.
sys_package object The application package this REST operation belongs to.
 link string Link to system package
 value string Value to system package
enforce_acl string Comma-separated sys_ids of ACL records enforced on this operation. Empty string means no ACLs are enforced.
sys_created_on number Timestamp of when this record was created.
consumes string Comma-separated list of content types this operation accepts as input.
sys_id string Unique identifier for the scripted REST operation record.
requires_snc_internal_role boolean If true, only users with an internal ServiceNow role can invoke this operation.
sys_mod_count number Number of times this record has been modified.
short_description string Brief description of the scripted REST operation.
request_example string Example request body for this operation.
sys_tags string Tags associated with the record.
sys_update_name string Unique update name used to identify the record across instances.
sys_policy string Security policy applied to this REST operation record.
produces string Comma-separated list of content types this operation can return.
active boolean Indicates whether this REST operation is active and can be invoked.
requires_authentication boolean If true, callers must authenticate before invoking this operation. A value of false means the endpoint is publicly accessible without credentials.
requires_acl_authorization boolean If true, ACL rules are evaluated for each request to this operation.
sys_updated_by string Username of the user who last updated this record.
operation_script string Script executed when this REST operation is invoked.
operation_uri string Full URI path for this operation.
sys_name string Name of the scripted REST operation.
consumes_customized boolean Indicates whether the consumed content types have been customized from defaults.
name string Name of the scripted REST operation.
http_method string HTTP method for this operation (e.g. GET, POST, PUT, DELETE).
default_operation_uri string Default URI path if no versioned URI is specified.
sys_scope object Application scope that owns this REST operation.
 value string Value to system scope
 link string Link to system scope
produces_customized boolean Indicates whether the produced content types have been customized from defaults.
sys_created_by string Username of the user who created this record.
ATTRIBUTE TYPE REFERS TO DESCRIPTION
ATTRIBUTE TYPE REFERS TO DESCRIPTION
choices string Comma-separated values for a choice list.
is_private string If this property is true, ServiceNow will exclude this property from being imported via update sets. Keeping system properties private prevents settings in one instance from overwriting values in another instance. For example, you may not want a system property in a development instance to use the same value as a production instance.
write_roles string Defines the roles that have write access to this property.
read_roles string Defines the roles that have read access to this property.
name string The property name.
value string The property value.
number_value number The value as a number representation. This value will be populated if the value is of a numerical type. It can be utilized for writing NGL rules that numerical expression evaluation (i.e. greater than).
type string The data type of the property value.