| ATTRIBUTE | TYPE | REFERS TO | DESCRIPTION |
|---|
| ATTRIBUTE | TYPE | REFERS TO | DESCRIPTION |
|---|
| ATTRIBUTE | TYPE | REFERS TO | DESCRIPTION |
|---|---|---|---|
| appID | string | The unique identifier of Connected Application | |
| riskLevel | string | The risk level associated with the Connected Application. | |
| permissionsMetadata | list<object> | Metadata for each permission associated with the Connected Application. | |
| name | string | Name of the permission. | |
| riskLevel | string | Risk level of the permission. | |
| firstSeenTime | number | Timestamp when the permission was first seen. | |
| removedTime | number | Timestamp when the permission was removed (0 if not removed). | |
| riskScore | number | Risk score of the permission. Not present when riskLevel is Unknown. | |
| connectedAppName | string | Name of the Connected Application. | |
| riskScore | number | The risk score associated with the Connected Application. |
| ATTRIBUTE | TYPE | REFERS TO | DESCRIPTION |
|---|
| ATTRIBUTE | TYPE | REFERS TO | DESCRIPTION |
|---|---|---|---|
| type | string | The type OAuth grant like Access Token, Refresh Token, Authorization Code, etc. | |
| sys_updated_by | string | User that last updated the associated OAuthCredential information. | |
| sys_created_by | string | User that originally created the associated User record. | |
| code_challenge | string | The code challenge associated with the OAuthCredential. | |
| sys_id | string | Represents the resource id of the OAuthCredential. | |
| scopes | string | The scope associated with OAuthCredential (usually useraccount). | |
| peer.type | string | The type of the OAuthEntity to which access is authorized. | |
| roles | list<string> | The roles of the user that corresponds to OAuthEntity(ConnectedApp) permissions. | |
| expires | number | Data and time the grant to associated ConnectedApp expires. | |
| login_method | string | The login method. | |
| sys_updated_on | number | Data and time the associated OAuthCredential information was updated. | |
| oauth_requestor_profile | string | The oauth requestor profile. | |
| session_user | string | The session user. | |
| peer | object | The associated OAuthEntity. | |
| link | string | Link to OAuthEntity. | |
| value | string | The ID of the resource oauth entity to which access is authorized. | |
| sys_created_on | number | Data and time the associated OAuthCredential was originally created. | |
| peer.name | string | The name of the OAuthEntity to which access is authorized. | |
| last_access | string | The last access | |
| requestor_id | string | The id of the requestor. | |
| sys_mod_count | string | Number of times that the associated OAuthCredential record has been modified. | |
| code_challenge_method | string | The method defined code challenge associated with the OAuthCredential. | |
| sys_tags | string | The sys tags associated with the OAuthCredential. | |
| user | object | The associated User. | |
| link | string | Link to User. | |
| value | string | The ID of the user on behalf of whom the client is authorized to access the resource. |
| ATTRIBUTE | TYPE | REFERS TO | DESCRIPTION |
|---|
| ATTRIBUTE | TYPE | REFERS TO | DESCRIPTION |
|---|
| ATTRIBUTE | TYPE | REFERS TO | DESCRIPTION |
|---|---|---|---|
| sys_updated_by | string | User that last updated the associated OAuthEntity information. | |
| certificate_url | string | url of the certificate. | |
| salt | string | The salt value. | |
| restricted_binding | boolean | Flag that indicates if the OAuthEntity has restricted binding. | |
| auth_url | string | Auth url. | |
| public_client | boolean | Indicates if the OAuthEntity is public_client or not. | |
| sys_mod_count | number | Number of times that the associated OAuthEntity record has been modified. | |
| access | string | Type of access | |
| sys_updated_on | number | Data and time the associated OAuthEntity information was updated. | |
| sys_created_on | number | Data and time the associated OAuthEntity was originally created. | |
| send_client_credentials_as | string | The way the client credentails are sent like i request parameter or header. | |
| comments | string | Comments on the associated OAuthEntity. | |
| revoke_token_url | string | The revoke token url. | |
| client_uuid | string | uuid of client. | |
| sys_id | string | Represents the resource id of the OAuthEntity. | |
| login_url | string | The login url. | |
| name | string | Name of the OAuthEntity. | |
| redirect_url | string | The redirect URLs authorization server redirect to. They must be absolute URLs and they are comma separated. | |
| mobile_client | boolean | . | |
| message_signature_lifespan | number | The lifespan of message signature. | |
| user | string | . | |
| type | string | The type of OAuthEntity. | |
| default_grant_type | string | Indicates the default grant type. | |
| active | boolean | Flag that indicates whether the OAuthEntity is active within the system. | |
| sys_tags | string | The sys tags associated with the OAuthEntity. | |
| sys_scope | object | The system scope. | |
| link | string | Link to system scope | |
| value | string | Value to system scope | |
| token_url | string | The url of the token. | |
| sys_created_by | string | User that originally created the associated User record. | |
| id_token_lifespan | number | Value of the id token lifespan. | |
| oauth_api_script | string | The oauth api script associated with the OAuthEntity. | |
| code_challenge_method | string | The method defined code challenge associated with the OAuthEntity. | |
| access_token_lifespan | number | Time in seconds the Access Token will be valid. | |
| sys_policy | string | The system policy. | |
| sys_name | string | Name of the OAuthEntity. | |
| auth_code_lifespan | number | auth code lifespan associated with OAuthEntity. | |
| sys_update_name | string | Concatenation of table name with id of the OAuthEntity. | |
| refresh_token_lifespan | number | Time in seconds the Refresh Token will be valid. | |
| refresh_token_url | string | Refresh token url. | |
| protocol_name | string | Name of the protocol. | |
| sys_class_name | string | Represents the table name. | |
| skip_authorize | boolean | Flag that indicates whether authorization can be skipped. | |
| use_mutual_auth | boolean | Flag that indicates the OAuthEntity uses mutual auth. | |
| sys_package | object | The system system package. | |
| link | string | Link to system package | |
| value | string | Value to system package | |
| logo_url | string | URL of the logo. |
| ATTRIBUTE | TYPE | REFERS TO | DESCRIPTION |
|---|---|---|---|
| sys_created_on | number | Timestamp when the record was created. | |
| sys_updated_on | number | Timestamp when the record was last updated. | |
| sys_tags | string | Tags associated with the record. | |
| sys_class_name | string | The class name of the authentication profile (e.g. sys_auth_profile_basic, sys_auth_profile_oauth2). | |
| sys_scope | object | Application scope that owns this authentication profile. | |
| link | string | Link to system scope | |
| value | string | Value to system scope | |
| sys_policy | string | Security policy applied to this authentication profile record. | |
| name | string | The name of the authentication profile. | |
| sys_id | string | Unique system identifier for the record. | |
| sys_mod_count | number | Number of times this record has been modified. | |
| sys_created_by | string | Username of the user who created the record. | |
| sys_updated_by | string | Username of the user who last updated the record. | |
| sys_package | object | The application package this authentication profile belongs to. | |
| link | string | Link to system package | |
| value | string | Value to system package | |
| sys_update_name | string | Unique update name used to identify the record across instances. | |
| sys_name | string | Display name of the record, typically matches the name field. |
| ATTRIBUTE | TYPE | REFERS TO | DESCRIPTION |
|---|
| ATTRIBUTE | TYPE | REFERS TO | DESCRIPTION |
|---|---|---|---|
| sys_id | string | Unique identifier for the processor record. | |
| xframe_sameorigin | boolean | Indicates whether the X-Frame-Options header is set to SAMEORIGIN for this processor's responses. | |
| sys_updated_on | number | Timestamp of the last update to this record. | |
| path_endpoint | string | Specific endpoint path for this processor. | |
| sys_tags | string | Tags associated with the record. | |
| sys_update_name | string | Unique update name used to identify the record across instances. | |
| require_csrf | boolean | Indicates whether CSRF token validation is required for requests to this processor. | |
| sys_created_on | number | Timestamp of when this record was created. | |
| sys_updated_by | string | Username of the user who last updated this record. | |
| sys_created_by | string | Username of the user who created this record. | |
| type | string | The type of processor (e.g. java, script). | |
| path | string | URL path pattern that triggers this processor. | |
| parameters | string | Parameters passed to this processor. | |
| script | string | Script executed by this processor if type is script. | |
| description | string | Description of the processor. | |
| sys_name | string | Name of the processor. | |
| active | boolean | Indicates whether this processor is active. | |
| interactive | boolean | Indicates whether this processor is interactive (runs in the browser session context). | |
| roles | string | Comma-separated list of roles required to access this processor. An empty string means the processor is publicly accessible without any role restriction. | |
| sys_mod_count | number | Number of times this record has been modified. | |
| class_name | string | Java class name for the processor if type is java. | |
| params_endpoint | string | Endpoint for parameter handling. | |
| name | string | Name of the processor. | |
| sys_scope | object | Application scope that owns this processor. | |
| link | string | Link to system scope | |
| value | string | Value to system scope | |
| sys_package | object | The application package this processor belongs to. | |
| link | string | Link to system package | |
| value | string | Value to system package | |
| sys_policy | string | Security policy applied to this processor record. |
| ATTRIBUTE | TYPE | REFERS TO | DESCRIPTION |
|---|
| ATTRIBUTE | TYPE | REFERS TO | DESCRIPTION |
|---|
| ATTRIBUTE | TYPE | REFERS TO | DESCRIPTION |
|---|---|---|---|
| sys_class_name | string | The name of the system class for this record, which indicates that it belongs to the sys_public table. | |
| sys_update_name | string | This is a name that identifies the record during updates. It often combines the table name with the record sys_id. | |
| sys_updated_by | string | The username of the individual who last updated the record. | |
| sys_created_on | number | The timestamp of when the record was created. | |
| sys_scope | object | This element indicates the scope of the record. | |
| link | string | A URL providing an API endpoint to access the scope details. | |
| value | string | The unique identifier of the scope | |
| sys_tags | string | This field is used for tagging records. It can hold values that help categorize or identify records. | |
| sys_id | string | A unique identifier for the record in the sys_public table. | |
| sys_package | object | This element contains information about the package associated with this record. | |
| link | string | A URL that provides an API endpoint to access the package details. | |
| value | string | The unique identifier of the package | |
| sys_name | string | The name of the public record. This value represents the record designation and can be used for display purposes. | |
| sys_created_by | string | The username of the individual who created the record. | |
| active | boolean | Indicates whether the record is currently active. If set to true, it means the public access is valid and currently in effect. | |
| sys_updated_on | number | The timestamp of when the record was last updated. | |
| page | string | Refers to the specific page or context where this public access applies. | |
| sys_policy | string | Indicates the policy level of the record. A value of protected suggests that certain rules are in place to safeguard this record from unauthorized access or modification. | |
| sys_mod_count | number | This represents the modification count for the record. It increments each time the record is updated. A value of 0 indicates that the record has not been modified since it was created. |
| ATTRIBUTE | TYPE | REFERS TO | DESCRIPTION |
|---|
| ATTRIBUTE | TYPE | REFERS TO | DESCRIPTION |
|---|---|---|---|
| controlled_by_refs | string | References to controlling ACL entries. | |
| sys_scope | object | Application scope that owns this ACL rule. | |
| link | string | Link to system scope | |
| value | string | Value to system scope | |
| sys_update_name | string | Unique update name used to identify the record across instances. | |
| name | string | The name of the ACL rule. | |
| operation | object | The operation controlled by this ACL (e.g. read, write, delete). | |
| active | boolean | Indicates whether this ACL rule is currently active. | |
| sys_id | string | Unique system identifier for the record. | |
| sys_created_on | number | Timestamp when the record was created. | |
| sys_updated_by | string | Username of the user who last updated the record. | |
| advanced | boolean | Indicates whether the ACL uses an advanced script condition. | |
| decision_type | string | The decision type of the ACL rule (e.g. allow, deny). | |
| type | object | The type of object the ACL applies to (e.g. record, field). | |
| script | string | Script that determines whether the ACL rule applies. | |
| sys_updated_on | number | Timestamp when the record was last updated. | |
| sys_created_by | string | Username of the user who created the record. | |
| description | string | Description of the ACL rule. | |
| admin_overrides | boolean | Indicates whether administrators can override this ACL rule. | |
| sys_class_name | string | The class name of this ACL record. | |
| applies_to | string | Specifies which records this ACL applies to. | |
| sys_name | string | Display name of the record, typically matches the name field. | |
| sys_tags | string | Tags associated with the record. | |
| local_or_existing | string | Indicates whether the ACL is local or inherited from an existing rule. | |
| sys_package | object | The application package this ACL rule belongs to. | |
| link | string | Link to system package | |
| value | string | Value to system package | |
| sys_policy | string | Security policy applied to this ACL record. | |
| condition | string | Condition expression that must evaluate to true for the ACL to apply. | |
| sys_mod_count | number | Number of times this record has been modified. |
| ATTRIBUTE | TYPE | REFERS TO | DESCRIPTION |
|---|
| ATTRIBUTE | TYPE | REFERS TO | DESCRIPTION |
|---|---|---|---|
| active | boolean | Flag that indicates whether the User is active within the system | |
| geolocation_tracked | boolean | Flag that indicates whether the contact location is obtained through geotracking. | |
| internal_integration_user | boolean | If set to true can bypass WS-Security authentication while using SOAP interface | |
| sys_created_on | number | Data and time the associated User was originally created. | |
| sys_updated_by | string | User that last updated the associated User information. | |
| default_perspective | object | The default perspective of the user | |
| link | string | Link to fetch the default_perspective resource | |
| value | string | ID of the default_perspective resource | |
| source | string | Source of the user | |
| sys_created_by | string | User that originally created the associated User record. | |
| sys_id | string | Represents the resource id of the user | |
| failed_attempts | number | Failed login attempts for the user | |
| last_position_update | string | Date and time the last position was updated. | |
| sys_mod_count | number | Number of times that the associated User record has been modified | |
| vip | boolean | Flag that indicates whether the associated User has VIP status. | |
| calendar_integration | string | Calendar application that the User uses. Ex: Outlook. | |
| web_service_access_only | boolean | Flag that indicates whether the User can only access services through the web. | |
| locked_out | boolean | Flag that indicates if the User is locked-out. | |
| password_needs_reset | boolean | Does the users password need resetting | |
| sys_domain | object | ServiceNow instance domain of the associated User record. | |
| link | string | Link to fetch the sys_domain resource | |
| value | string | Id of the sys_domain resource | |
| enable_multifactor_authn | boolean | Flag that indicates whether multifactor authorization is required for the User to log in to the servicportal. | |
| last_login_time | number | The time at which the user last logged in. | |
| notification | string | Indicates whether the User should receive notifications. Valid values : Disabled, Enabled | |
| name | string | Name of the user. | |
| hashed_user_id | string | SHA-256 one-way hash of the sys_user_id. | |
| ldap_server | object | Reference to LDAP Server table | |
| link | string | Link to fetch the ldap_server resource | |
| value | string | Id of the ldap_server resource | |
| sys_domain_path | string | User record domain path. | |
| sys_updated_on | number | Data and time the associated User information was updated. | |
| user_name | string | User Name of the user. | |
| string | Email of the user. | ||
| schedule | object | ID of the record that describes the work schedule for the associated User. | |
| link | string | Link to fetch the cmn_schedule resource | |
| value | string | Id of the cmn_schedule resource | |
| time_sheet_policy | string | Time sheet policy for the associated contact |
| ATTRIBUTE | TYPE | REFERS TO | DESCRIPTION |
|---|---|---|---|
| state | string | State of the role assignment | |
| sys_id | string | Unique system identifier for the record | |
| sys_updated_on | number | Data and time the associated User information was updated. | |
| inherited | boolean | Indicates if the role is inherited | |
| role | object | Role assigned to the user | |
| link | string | Link to role | |
| value | string | Value to role | |
| sys_created_by | string | User who created the record | |
| sys_created_on | number | Data and time the associated User was originally created. | |
| sys_updated_by | string | User who last updated the record | |
| included_in_role | object | Role in which this role is included | |
| link | string | Link to user has role | |
| value | string | Value to user has role | |
| inh_map | string | Inheritance Map | |
| sys_mod_count | number | Number of times the record was modified | |
| user | object | User to whom the role is assigned | |
| link | string | Link to user | |
| value | string | Value to user | |
| granted_by | object | User or role that granted this role to the user | |
| link | string | Link to User or role | |
| value | string | Value to User or role | |
| included_in_role_instance | object | Role instance in which this role is included | |
| link | string | Link to role instance | |
| value | string | Value to role instance | |
| inh_count | number | Inherited count if the role is inherited |
| ATTRIBUTE | TYPE | REFERS TO | DESCRIPTION |
|---|
| ATTRIBUTE | TYPE | REFERS TO | DESCRIPTION |
|---|---|---|---|
| includes_roles | list<string> | Roles included within this user role | |
| sys_created_on | number | Data and time the associated User was originally created. | |
| sys_package | object | Package associated with the record | |
| value | string | Value to system package | |
| link | string | Link to system package | |
| assignable_by | string | Roles that can assign this user role | |
| can_delegate | boolean | Indicates if users with this role can delegate tasks | |
| description | string | Description or details of the user role | |
| scoped_admin | boolean | Indicates if the user role has scoped administration privileges | |
| sys_id | string | Unique system identifier for the record | |
| sys_name | string | Name of the record | |
| sys_scope | object | Scope associated with the user role. | |
| link | string | Link to system scope | |
| value | string | Value to system scope | |
| sys_created_by | string | User who created the record | |
| elevated_privilege | boolean | Indicates if the user role has elevated privileges | |
| sys_update_name | string | User who last updated the record | |
| suffix | string | Suffix or postfix for the user role | |
| sys_mod_count | number | Number of times the record was modified | |
| name | string | Name or label of the user role | |
| sys_updated_on | number | Data and time the associated User information was updated. | |
| sys_class_name | string | System class name of the record | |
| sys_updated_by | string | User who last updated the record | |
| grantable | boolean | Indicates if the user role can be granted to other users | |
| sys_policy | string | Policy associated with the user role |
| ATTRIBUTE | TYPE | REFERS TO | DESCRIPTION |
|---|
| ATTRIBUTE | TYPE | REFERS TO | DESCRIPTION |
|---|
| ATTRIBUTE | TYPE | REFERS TO | DESCRIPTION |
|---|---|---|---|
| sys_name | string | Name of the scripted REST service definition. | |
| is_versioned | boolean | Indicates whether this REST service definition supports versioning. | |
| enforce_acl | string | Comma-separated sys_ids of ACL records enforced on this service definition. Empty string means no ACLs are enforced. | |
| sys_created_on | number | Timestamp of when this record was created. | |
| sys_updated_by | string | Username of the user who last updated this record. | |
| sys_created_by | string | Username of the user who created this record. | |
| service_id | string | Unique identifier string for the REST service used in the URI namespace. | |
| default_version | string | The default active version for this versioned REST service. | |
| active | boolean | Indicates whether this REST service definition is active and its operations can be invoked. | |
| produces_customized | boolean | Indicates whether the produced content types have been customized from defaults. | |
| doc_link | string | URL to external documentation for this REST service. | |
| consumes | string | Comma-separated list of content types this service accepts as input. | |
| sys_scope | object | Application scope that owns this REST service definition. | |
| link | string | Link to system scope | |
| value | string | Value to system scope | |
| sys_update_name | string | Unique update name used to identify the record across instances. | |
| name | string | Name of the scripted REST service definition. | |
| short_description | string | Brief description of the scripted REST service definition. | |
| sys_id | string | Unique identifier for the scripted REST service definition record. | |
| sys_updated_on | number | Timestamp of the last update to this record. | |
| sys_tags | string | Tags associated with the record. | |
| sys_package | object | The application package this REST service definition belongs to. | |
| link | string | Link to system package | |
| value | string | Value to system package | |
| sys_policy | string | Security policy applied to this REST service definition record. | |
| consumes_customized | boolean | Indicates whether the consumed content types have been customized from defaults. | |
| sys_mod_count | number | Number of times this record has been modified. | |
| base_uri | string | Base URI path for all operations in this REST service definition. | |
| namespace | string | Namespace prefix used in the base URI for this REST service. | |
| produces | string | Comma-separated list of content types this service can return. |
| ATTRIBUTE | TYPE | REFERS TO | DESCRIPTION |
|---|
| ATTRIBUTE | TYPE | REFERS TO | DESCRIPTION |
|---|---|---|---|
| produces_customized | boolean | Indicates whether the produced content types have been customized from defaults. | |
| name | string | Name of the scripted REST operation. | |
| http_method | string | HTTP method for this operation (e.g. GET, POST, PUT, DELETE). | |
| sys_id | string | Unique identifier for the scripted REST operation record. | |
| requires_acl_authorization | boolean | If true, ACL rules are evaluated for each request to this operation. | |
| requires_snc_internal_role | boolean | If true, only users with an internal ServiceNow role can invoke this operation. | |
| request_example | string | Example request body for this operation. | |
| sys_policy | string | Security policy applied to this REST operation record. | |
| requires_authentication | boolean | If true, callers must authenticate before invoking this operation. A value of false means the endpoint is publicly accessible without credentials. | |
| produces | string | Comma-separated list of content types this operation can return. | |
| sys_updated_on | number | Timestamp of the last update to this record. | |
| sys_tags | string | Tags associated with the record. | |
| sys_scope | object | Application scope that owns this REST operation. | |
| link | string | Link to system scope | |
| value | string | Value to system scope | |
| sys_name | string | Name of the scripted REST operation. | |
| consumes_customized | boolean | Indicates whether the consumed content types have been customized from defaults. | |
| operation_script | string | Script executed when this REST operation is invoked. | |
| web_service_version | string | Version of the REST service this operation belongs to. | |
| sys_package | object | The application package this REST operation belongs to. | |
| link | string | Link to system package | |
| value | string | Value to system package | |
| relative_path | string | Relative path of this operation within the parent REST service. | |
| consumes | string | Comma-separated list of content types this operation accepts as input. | |
| active | boolean | Indicates whether this REST operation is active and can be invoked. | |
| sys_updated_by | string | Username of the user who last updated this record. | |
| operation_uri | string | Full URI path for this operation. | |
| default_operation_uri | string | Default URI path if no versioned URI is specified. | |
| enforce_acl | string | Comma-separated sys_ids of ACL records enforced on this operation. Empty string means no ACLs are enforced. | |
| web_service_definition | object | Reference to the parent scripted REST service definition that owns this operation. | |
| link | string | URL to access the parent service definition record via the REST API. | |
| value | string | sys_id of the parent scripted REST service definition. | |
| sys_mod_count | number | Number of times this record has been modified. | |
| sys_created_by | string | Username of the user who created this record. | |
| short_description | string | Brief description of the scripted REST operation. | |
| sys_update_name | string | Unique update name used to identify the record across instances. | |
| sys_created_on | number | Timestamp of when this record was created. |
| ATTRIBUTE | TYPE | REFERS TO | DESCRIPTION |
|---|
| ATTRIBUTE | TYPE | REFERS TO | DESCRIPTION |
|---|---|---|---|
| type | string | The data type of the property value. | |
| choices | string | Comma-separated values for a choice list. | |
| is_private | string | If this property is true, ServiceNow will exclude this property from being imported via update sets. Keeping system properties private prevents settings in one instance from overwriting values in another instance. For example, you may not want a system property in a development instance to use the same value as a production instance. | |
| write_roles | string | Defines the roles that have write access to this property. | |
| read_roles | string | Defines the roles that have read access to this property. | |
| name | string | The property name. | |
| value | string | The property value. | |
| number_value | number | The value as a number representation. This value will be populated if the value is of a numerical type. It can be utilized for writing NGL rules that numerical expression evaluation (i.e. greater than). |