Hi, In this video you are doing exactly what I want to do. When I set it up it works perfectly for me (admin role) but when I use the service account for this project, I end up with a new incident record not an update to the one with a sys_id match. I can give the service account itil access and it corrects the issue, but I am trying to limit this account to only being able to update work_notes. If they have the itil role and the rest_api role, now they can hit the table api and do whatever they want. :( Please help.
OK. When impersonating the service account, I was able to get it to work in the REST API explorer by granting the import_admin and sn_incident_read. import_admin still feels like overkill, but at least it doesn't have full itil access.
Oh Wow!! Sorry totally missed these comments!..absolutley agree you dont want to grant full itil for this (what does that mean to license cost..who knows lol)..could and maybe should create your own role for that integration that only allows access to that import table..of course could add sn_incident_read to that too. Then you have everything contained in that role. Is it 1 role per integration, 1 role per 'anyone/thing' that wants to integrate..there's options there...get the thing working first, then refine I always find the best way...endless possibilities :) :) thats why we love it!
Thanks for sharing mate, cheers!
Thaaaank youuuu! I was hunting the web to learn how to set this up. It's sad how little info there is. I am so glad I found your channel!
This is awesome! These comments are the best. Thanks' for taking the time to message.
Thank You.
Very welcome!
Thanks for the video, really helpful. Could I send a CSV file thru this api ?
Yes, of course
Hi, In this video you are doing exactly what I want to do. When I set it up it works perfectly for me (admin role) but when I use the service account for this project, I end up with a new incident record not an update to the one with a sys_id match.
I can give the service account itil access and it corrects the issue, but I am trying to limit this account to only being able to update work_notes. If they have the itil role and the rest_api role, now they can hit the table api and do whatever they want. :(
Please help.
OK. When impersonating the service account, I was able to get it to work in the REST API explorer by granting the import_admin and sn_incident_read. import_admin still feels like overkill, but at least it doesn't have full itil access.
Oh Wow!! Sorry totally missed these comments!..absolutley agree you dont want to grant full itil for this (what does that mean to license cost..who knows lol)..could and maybe should create your own role for that integration that only allows access to that import table..of course could add sn_incident_read to that too. Then you have everything contained in that role. Is it 1 role per integration, 1 role per 'anyone/thing' that wants to integrate..there's options there...get the thing working first, then refine I always find the best way...endless possibilities :) :) thats why we love it!
Again...apologies on the delay!
Can we plz make a video on rest api trigger flow in service now
Thanks for the comment..will add it to the list.
I’m a dog person..what can I say 😀🐩🤪