| ATTRIBUTE | TYPE | REFERS TO | DESCRIPTION |
|---|
| ATTRIBUTE | TYPE | REFERS TO | DESCRIPTION |
|---|
| ATTRIBUTE | TYPE | REFERS TO | DESCRIPTION |
|---|---|---|---|
| appID | string | The unique identifier of Connected Application | |
| riskLevel | string | The risk level associated with the Connected Application. | |
| permissionsMetadata | list<object> | Metadata for each permission associated with the Connected Application. | |
| name | string | Name of the permission. | |
| riskLevel | string | Risk level of the permission. | |
| firstSeenTime | number | Timestamp when the permission was first seen. | |
| removedTime | number | Timestamp when the permission was removed (0 if not removed). | |
| riskScore | number | Risk score of the permission. Not present when riskLevel is Unknown. | |
| connectedAppName | string | Name of the Connected Application. | |
| riskScore | number | The risk score associated with the Connected Application. |
| ATTRIBUTE | TYPE | REFERS TO | DESCRIPTION |
|---|
| ATTRIBUTE | TYPE | REFERS TO | DESCRIPTION |
|---|---|---|---|
| last_access | string | The last access | |
| login_method | string | The login method. | |
| sys_id | string | Represents the resource id of the OAuthCredential. | |
| peer | object | The associated OAuthEntity. | |
| link | string | Link to OAuthEntity. | |
| value | string | The ID of the resource oauth entity to which access is authorized. | |
| sys_created_on | number | Data and time the associated OAuthCredential was originally created. | |
| code_challenge | string | The code challenge associated with the OAuthCredential. | |
| peer.name | string | The name of the OAuthEntity to which access is authorized. | |
| expires | number | Data and time the grant to associated ConnectedApp expires. | |
| sys_updated_on | number | Data and time the associated OAuthCredential information was updated. | |
| oauth_requestor_profile | string | The oauth requestor profile. | |
| type | string | The type OAuth grant like Access Token, Refresh Token, Authorization Code, etc. | |
| session_user | string | The session user. | |
| scopes | string | The scope associated with OAuthCredential (usually useraccount). | |
| user | object | The associated User. | |
| link | string | Link to User. | |
| value | string | The ID of the user on behalf of whom the client is authorized to access the resource. | |
| peer.type | string | The type of the OAuthEntity to which access is authorized. | |
| requestor_id | string | The id of the requestor. | |
| sys_mod_count | string | Number of times that the associated OAuthCredential record has been modified. | |
| code_challenge_method | string | The method defined code challenge associated with the OAuthCredential. | |
| sys_updated_by | string | User that last updated the associated OAuthCredential information. | |
| sys_tags | string | The sys tags associated with the OAuthCredential. | |
| sys_created_by | string | User that originally created the associated User record. | |
| roles | list<string> | The roles of the user that corresponds to OAuthEntity(ConnectedApp) permissions. |
| ATTRIBUTE | TYPE | REFERS TO | DESCRIPTION |
|---|
| ATTRIBUTE | TYPE | REFERS TO | DESCRIPTION |
|---|
| ATTRIBUTE | TYPE | REFERS TO | DESCRIPTION |
|---|---|---|---|
| oauth_api_script | string | The oauth api script associated with the OAuthEntity. | |
| revoke_token_url | string | The revoke token url. | |
| sys_policy | string | The system policy. | |
| access | string | Type of access | |
| login_url | string | The login url. | |
| public_client | boolean | Indicates if the OAuthEntity is public_client or not. | |
| sys_name | string | Name of the OAuthEntity. | |
| protocol_name | string | Name of the protocol. | |
| sys_class_name | string | Represents the table name. | |
| send_client_credentials_as | string | The way the client credentails are sent like i request parameter or header. | |
| token_url | string | The url of the token. | |
| id_token_lifespan | number | Value of the id token lifespan. | |
| sys_mod_count | number | Number of times that the associated OAuthEntity record has been modified. | |
| code_challenge_method | string | The method defined code challenge associated with the OAuthEntity. | |
| sys_updated_on | number | Data and time the associated OAuthEntity information was updated. | |
| type | string | The type of OAuthEntity. | |
| sys_created_on | number | Data and time the associated OAuthEntity was originally created. | |
| default_grant_type | string | Indicates the default grant type. | |
| auth_code_lifespan | number | auth code lifespan associated with OAuthEntity. | |
| restricted_binding | boolean | Flag that indicates if the OAuthEntity has restricted binding. | |
| access_token_lifespan | number | Time in seconds the Access Token will be valid. | |
| auth_url | string | Auth url. | |
| certificate_url | string | url of the certificate. | |
| sys_scope | object | The system scope. | |
| value | string | Value to system scope | |
| link | string | Link to system scope | |
| sys_created_by | string | User that originally created the associated User record. | |
| salt | string | The salt value. | |
| sys_package | object | The system system package. | |
| link | string | Link to system package | |
| value | string | Value to system package | |
| refresh_token_lifespan | number | Time in seconds the Refresh Token will be valid. | |
| refresh_token_url | string | Refresh token url. | |
| redirect_url | string | The redirect URLs authorization server redirect to. They must be absolute URLs and they are comma separated. | |
| active | boolean | Flag that indicates whether the OAuthEntity is active within the system. | |
| sys_tags | string | The sys tags associated with the OAuthEntity. | |
| use_mutual_auth | boolean | Flag that indicates the OAuthEntity uses mutual auth. | |
| message_signature_lifespan | number | The lifespan of message signature. | |
| client_uuid | string | uuid of client. | |
| sys_id | string | Represents the resource id of the OAuthEntity. | |
| sys_updated_by | string | User that last updated the associated OAuthEntity information. | |
| skip_authorize | boolean | Flag that indicates whether authorization can be skipped. | |
| sys_update_name | string | Concatenation of table name with id of the OAuthEntity. | |
| mobile_client | boolean | . | |
| comments | string | Comments on the associated OAuthEntity. | |
| name | string | Name of the OAuthEntity. | |
| user | string | . | |
| logo_url | string | URL of the logo. |
| ATTRIBUTE | TYPE | REFERS TO | DESCRIPTION |
|---|---|---|---|
| sys_package | object | The application package this authentication profile belongs to. | |
| link | string | Link to system package | |
| value | string | Value to system package | |
| sys_name | string | Display name of the record, typically matches the name field. | |
| sys_scope | object | Application scope that owns this authentication profile. | |
| link | string | Link to system scope | |
| value | string | Value to system scope | |
| sys_policy | string | Security policy applied to this authentication profile record. | |
| name | string | The name of the authentication profile. | |
| sys_id | string | Unique system identifier for the record. | |
| sys_mod_count | number | Number of times this record has been modified. | |
| sys_updated_on | number | Timestamp when the record was last updated. | |
| sys_updated_by | string | Username of the user who last updated the record. | |
| sys_class_name | string | The class name of the authentication profile (e.g. sys_auth_profile_basic, sys_auth_profile_oauth2). | |
| sys_update_name | string | Unique update name used to identify the record across instances. | |
| sys_created_on | number | Timestamp when the record was created. | |
| sys_created_by | string | Username of the user who created the record. | |
| sys_tags | string | Tags associated with the record. |
| ATTRIBUTE | TYPE | REFERS TO | DESCRIPTION |
|---|
| ATTRIBUTE | TYPE | REFERS TO | DESCRIPTION |
|---|---|---|---|
| params_endpoint | string | Endpoint for parameter handling. | |
| sys_tags | string | Tags associated with the record. | |
| sys_update_name | string | Unique update name used to identify the record across instances. | |
| sys_name | string | Name of the processor. | |
| xframe_sameorigin | boolean | Indicates whether the X-Frame-Options header is set to SAMEORIGIN for this processor's responses. | |
| require_csrf | boolean | Indicates whether CSRF token validation is required for requests to this processor. | |
| name | string | Name of the processor. | |
| class_name | string | Java class name for the processor if type is java. | |
| sys_scope | object | Application scope that owns this processor. | |
| link | string | Link to system scope | |
| value | string | Value to system scope | |
| sys_package | object | The application package this processor belongs to. | |
| link | string | Link to system package | |
| value | string | Value to system package | |
| active | boolean | Indicates whether this processor is active. | |
| roles | string | Comma-separated list of roles required to access this processor. An empty string means the processor is publicly accessible without any role restriction. | |
| sys_updated_by | string | Username of the user who last updated this record. | |
| sys_created_by | string | Username of the user who created this record. | |
| script | string | Script executed by this processor if type is script. | |
| sys_mod_count | number | Number of times this record has been modified. | |
| sys_updated_on | number | Timestamp of the last update to this record. | |
| sys_created_on | number | Timestamp of when this record was created. | |
| description | string | Description of the processor. | |
| type | string | The type of processor (e.g. java, script). | |
| parameters | string | Parameters passed to this processor. | |
| sys_policy | string | Security policy applied to this processor record. | |
| sys_id | string | Unique identifier for the processor record. | |
| interactive | boolean | Indicates whether this processor is interactive (runs in the browser session context). | |
| path | string | URL path pattern that triggers this processor. | |
| path_endpoint | string | Specific endpoint path for this processor. |
| ATTRIBUTE | TYPE | REFERS TO | DESCRIPTION |
|---|
| ATTRIBUTE | TYPE | REFERS TO | DESCRIPTION |
|---|
| ATTRIBUTE | TYPE | REFERS TO | DESCRIPTION |
|---|---|---|---|
| sys_update_name | string | This is a name that identifies the record during updates. It often combines the table name with the record sys_id. | |
| sys_package | object | This element contains information about the package associated with this record. | |
| link | string | A URL that provides an API endpoint to access the package details. | |
| value | string | The unique identifier of the package | |
| sys_updated_by | string | The username of the individual who last updated the record. | |
| sys_scope | object | This element indicates the scope of the record. | |
| link | string | A URL providing an API endpoint to access the scope details. | |
| value | string | The unique identifier of the scope | |
| sys_policy | string | Indicates the policy level of the record. A value of protected suggests that certain rules are in place to safeguard this record from unauthorized access or modification. | |
| active | boolean | Indicates whether the record is currently active. If set to true, it means the public access is valid and currently in effect. | |
| sys_updated_on | number | The timestamp of when the record was last updated. | |
| sys_name | string | The name of the public record. This value represents the record designation and can be used for display purposes. | |
| sys_mod_count | number | This represents the modification count for the record. It increments each time the record is updated. A value of 0 indicates that the record has not been modified since it was created. | |
| sys_created_on | number | The timestamp of when the record was created. | |
| page | string | Refers to the specific page or context where this public access applies. | |
| sys_created_by | string | The username of the individual who created the record. | |
| sys_tags | string | This field is used for tagging records. It can hold values that help categorize or identify records. | |
| sys_class_name | string | The name of the system class for this record, which indicates that it belongs to the sys_public table. | |
| sys_id | string | A unique identifier for the record in the sys_public table. |
| ATTRIBUTE | TYPE | REFERS TO | DESCRIPTION |
|---|
| ATTRIBUTE | TYPE | REFERS TO | DESCRIPTION |
|---|---|---|---|
| name | string | The name of the ACL rule. | |
| type | object | The type of object the ACL applies to (e.g. record, field). | |
| script | string | Script that determines whether the ACL rule applies. | |
| sys_id | string | Unique system identifier for the record. | |
| sys_mod_count | number | Number of times this record has been modified. | |
| sys_updated_on | number | Timestamp when the record was last updated. | |
| advanced | boolean | Indicates whether the ACL uses an advanced script condition. | |
| controlled_by_refs | string | References to controlling ACL entries. | |
| admin_overrides | boolean | Indicates whether administrators can override this ACL rule. | |
| description | string | Description of the ACL rule. | |
| sys_class_name | string | The class name of this ACL record. | |
| decision_type | string | The decision type of the ACL rule (e.g. allow, deny). | |
| sys_scope | object | Application scope that owns this ACL rule. | |
| link | string | Link to system scope | |
| value | string | Value to system scope | |
| local_or_existing | string | Indicates whether the ACL is local or inherited from an existing rule. | |
| sys_package | object | The application package this ACL rule belongs to. | |
| value | string | Value to system package | |
| link | string | Link to system package | |
| sys_policy | string | Security policy applied to this ACL record. | |
| operation | object | The operation controlled by this ACL (e.g. read, write, delete). | |
| active | boolean | Indicates whether this ACL rule is currently active. | |
| condition | string | Condition expression that must evaluate to true for the ACL to apply. | |
| applies_to | string | Specifies which records this ACL applies to. | |
| sys_name | string | Display name of the record, typically matches the name field. | |
| sys_tags | string | Tags associated with the record. | |
| sys_created_on | number | Timestamp when the record was created. | |
| sys_created_by | string | Username of the user who created the record. | |
| sys_updated_by | string | Username of the user who last updated the record. | |
| sys_update_name | string | Unique update name used to identify the record across instances. |
| ATTRIBUTE | TYPE | REFERS TO | DESCRIPTION |
|---|
| ATTRIBUTE | TYPE | REFERS TO | DESCRIPTION |
|---|---|---|---|
| notification | string | Indicates whether the User should receive notifications. Valid values : Disabled, Enabled | |
| sys_id | string | Represents the resource id of the user | |
| calendar_integration | string | Calendar application that the User uses. Ex: Outlook. | |
| last_login_time | number | The time at which the user last logged in. | |
| ldap_server | object | Reference to LDAP Server table | |
| link | string | Link to fetch the ldap_server resource | |
| value | string | Id of the ldap_server resource | |
| sys_updated_on | number | Data and time the associated User information was updated. | |
| active | boolean | Flag that indicates whether the User is active within the system | |
| enable_multifactor_authn | boolean | Flag that indicates whether multifactor authorization is required for the User to log in to the servicportal. | |
| sys_created_on | number | Data and time the associated User was originally created. | |
| geolocation_tracked | boolean | Flag that indicates whether the contact location is obtained through geotracking. | |
| last_position_update | string | Date and time the last position was updated. | |
| locked_out | boolean | Flag that indicates if the User is locked-out. | |
| password_needs_reset | boolean | Does the users password need resetting | |
| sys_domain | object | ServiceNow instance domain of the associated User record. | |
| link | string | Link to fetch the sys_domain resource | |
| value | string | Id of the sys_domain resource | |
| user_name | string | User Name of the user. | |
| web_service_access_only | boolean | Flag that indicates whether the User can only access services through the web. | |
| string | Email of the user. | ||
| failed_attempts | number | Failed login attempts for the user | |
| internal_integration_user | boolean | If set to true can bypass WS-Security authentication while using SOAP interface | |
| hashed_user_id | string | SHA-256 one-way hash of the sys_user_id. | |
| schedule | object | ID of the record that describes the work schedule for the associated User. | |
| link | string | Link to fetch the cmn_schedule resource | |
| value | string | Id of the cmn_schedule resource | |
| source | string | Source of the user | |
| sys_domain_path | string | User record domain path. | |
| default_perspective | object | The default perspective of the user | |
| link | string | Link to fetch the default_perspective resource | |
| value | string | ID of the default_perspective resource | |
| name | string | Name of the user. | |
| sys_updated_by | string | User that last updated the associated User information. | |
| sys_created_by | string | User that originally created the associated User record. | |
| sys_mod_count | number | Number of times that the associated User record has been modified | |
| time_sheet_policy | string | Time sheet policy for the associated contact | |
| vip | boolean | Flag that indicates whether the associated User has VIP status. |
| ATTRIBUTE | TYPE | REFERS TO | DESCRIPTION |
|---|---|---|---|
| inh_map | string | Inheritance Map | |
| sys_created_on | number | Data and time the associated User was originally created. | |
| sys_created_by | string | User who created the record | |
| user | object | User to whom the role is assigned | |
| link | string | Link to user | |
| value | string | Value to user | |
| included_in_role | object | Role in which this role is included | |
| link | string | Link to user has role | |
| value | string | Value to user has role | |
| state | string | State of the role assignment | |
| sys_id | string | Unique system identifier for the record | |
| sys_mod_count | number | Number of times the record was modified | |
| sys_updated_on | number | Data and time the associated User information was updated. | |
| granted_by | object | User or role that granted this role to the user | |
| link | string | Link to User or role | |
| value | string | Value to User or role | |
| included_in_role_instance | object | Role instance in which this role is included | |
| value | string | Value to role instance | |
| link | string | Link to role instance | |
| inherited | boolean | Indicates if the role is inherited | |
| role | object | Role assigned to the user | |
| value | string | Value to role | |
| link | string | Link to role | |
| sys_updated_by | string | User who last updated the record | |
| inh_count | number | Inherited count if the role is inherited |
| ATTRIBUTE | TYPE | REFERS TO | DESCRIPTION |
|---|
| ATTRIBUTE | TYPE | REFERS TO | DESCRIPTION |
|---|---|---|---|
| grantable | boolean | Indicates if the user role can be granted to other users | |
| sys_mod_count | number | Number of times the record was modified | |
| name | string | Name or label of the user role | |
| assignable_by | string | Roles that can assign this user role | |
| sys_policy | string | Policy associated with the user role | |
| sys_updated_on | number | Data and time the associated User information was updated. | |
| includes_roles | list<string> | Roles included within this user role | |
| sys_created_on | number | Data and time the associated User was originally created. | |
| sys_scope | object | Scope associated with the user role. | |
| link | string | Link to system scope | |
| value | string | Value to system scope | |
| elevated_privilege | boolean | Indicates if the user role has elevated privileges | |
| sys_id | string | Unique system identifier for the record | |
| sys_updated_by | string | User who last updated the record | |
| sys_name | string | Name of the record | |
| sys_update_name | string | User who last updated the record | |
| can_delegate | boolean | Indicates if users with this role can delegate tasks | |
| suffix | string | Suffix or postfix for the user role | |
| sys_created_by | string | User who created the record | |
| sys_package | object | Package associated with the record | |
| link | string | Link to system package | |
| value | string | Value to system package | |
| description | string | Description or details of the user role | |
| sys_class_name | string | System class name of the record | |
| scoped_admin | boolean | Indicates if the user role has scoped administration privileges |
| ATTRIBUTE | TYPE | REFERS TO | DESCRIPTION |
|---|
| ATTRIBUTE | TYPE | REFERS TO | DESCRIPTION |
|---|
| ATTRIBUTE | TYPE | REFERS TO | DESCRIPTION |
|---|---|---|---|
| sys_package | object | The application package this REST service definition belongs to. | |
| value | string | Value to system package | |
| link | string | Link to system package | |
| is_versioned | boolean | Indicates whether this REST service definition supports versioning. | |
| produces_customized | boolean | Indicates whether the produced content types have been customized from defaults. | |
| sys_updated_on | number | Timestamp of the last update to this record. | |
| doc_link | string | URL to external documentation for this REST service. | |
| service_id | string | Unique identifier string for the REST service used in the URI namespace. | |
| default_version | string | The default active version for this versioned REST service. | |
| sys_tags | string | Tags associated with the record. | |
| sys_update_name | string | Unique update name used to identify the record across instances. | |
| sys_created_by | string | Username of the user who created this record. | |
| produces | string | Comma-separated list of content types this service can return. | |
| sys_scope | object | Application scope that owns this REST service definition. | |
| link | string | Link to system scope | |
| value | string | Value to system scope | |
| sys_policy | string | Security policy applied to this REST service definition record. | |
| sys_id | string | Unique identifier for the scripted REST service definition record. | |
| active | boolean | Indicates whether this REST service definition is active and its operations can be invoked. | |
| enforce_acl | string | Comma-separated sys_ids of ACL records enforced on this service definition. Empty string means no ACLs are enforced. | |
| sys_created_on | number | Timestamp of when this record was created. | |
| sys_updated_by | string | Username of the user who last updated this record. | |
| base_uri | string | Base URI path for all operations in this REST service definition. | |
| sys_name | string | Name of the scripted REST service definition. | |
| consumes_customized | boolean | Indicates whether the consumed content types have been customized from defaults. | |
| sys_mod_count | number | Number of times this record has been modified. | |
| name | string | Name of the scripted REST service definition. | |
| short_description | string | Brief description of the scripted REST service definition. | |
| namespace | string | Namespace prefix used in the base URI for this REST service. | |
| consumes | string | Comma-separated list of content types this service accepts as input. |
| ATTRIBUTE | TYPE | REFERS TO | DESCRIPTION |
|---|
| ATTRIBUTE | TYPE | REFERS TO | DESCRIPTION |
|---|---|---|---|
| web_service_version | string | Version of the REST service this operation belongs to. | |
| relative_path | string | Relative path of this operation within the parent REST service. | |
| web_service_definition | object | Reference to the parent scripted REST service definition that owns this operation. | |
| link | string | URL to access the parent service definition record via the REST API. | |
| value | string | sys_id of the parent scripted REST service definition. | |
| sys_updated_on | number | Timestamp of the last update to this record. | |
| sys_package | object | The application package this REST operation belongs to. | |
| link | string | Link to system package | |
| value | string | Value to system package | |
| enforce_acl | string | Comma-separated sys_ids of ACL records enforced on this operation. Empty string means no ACLs are enforced. | |
| sys_created_on | number | Timestamp of when this record was created. | |
| consumes | string | Comma-separated list of content types this operation accepts as input. | |
| sys_id | string | Unique identifier for the scripted REST operation record. | |
| requires_snc_internal_role | boolean | If true, only users with an internal ServiceNow role can invoke this operation. | |
| sys_mod_count | number | Number of times this record has been modified. | |
| short_description | string | Brief description of the scripted REST operation. | |
| request_example | string | Example request body for this operation. | |
| sys_tags | string | Tags associated with the record. | |
| sys_update_name | string | Unique update name used to identify the record across instances. | |
| sys_policy | string | Security policy applied to this REST operation record. | |
| produces | string | Comma-separated list of content types this operation can return. | |
| active | boolean | Indicates whether this REST operation is active and can be invoked. | |
| requires_authentication | boolean | If true, callers must authenticate before invoking this operation. A value of false means the endpoint is publicly accessible without credentials. | |
| requires_acl_authorization | boolean | If true, ACL rules are evaluated for each request to this operation. | |
| sys_updated_by | string | Username of the user who last updated this record. | |
| operation_script | string | Script executed when this REST operation is invoked. | |
| operation_uri | string | Full URI path for this operation. | |
| sys_name | string | Name of the scripted REST operation. | |
| consumes_customized | boolean | Indicates whether the consumed content types have been customized from defaults. | |
| name | string | Name of the scripted REST operation. | |
| http_method | string | HTTP method for this operation (e.g. GET, POST, PUT, DELETE). | |
| default_operation_uri | string | Default URI path if no versioned URI is specified. | |
| sys_scope | object | Application scope that owns this REST operation. | |
| value | string | Value to system scope | |
| link | string | Link to system scope | |
| produces_customized | boolean | Indicates whether the produced content types have been customized from defaults. | |
| sys_created_by | string | Username of the user who created this record. |
| ATTRIBUTE | TYPE | REFERS TO | DESCRIPTION |
|---|
| ATTRIBUTE | TYPE | REFERS TO | DESCRIPTION |
|---|---|---|---|
| choices | string | Comma-separated values for a choice list. | |
| is_private | string | If this property is true, ServiceNow will exclude this property from being imported via update sets. Keeping system properties private prevents settings in one instance from overwriting values in another instance. For example, you may not want a system property in a development instance to use the same value as a production instance. | |
| write_roles | string | Defines the roles that have write access to this property. | |
| read_roles | string | Defines the roles that have read access to this property. | |
| name | string | The property name. | |
| value | string | The property value. | |
| number_value | number | The value as a number representation. This value will be populated if the value is of a numerical type. It can be utilized for writing NGL rules that numerical expression evaluation (i.e. greater than). | |
| type | string | The data type of the property value. |