Required Permissions for ServiceNow SOAP Integration

General Requirements

FortiSIEM uses ServiceNow Direct Web Service for integration. FortiSIEM communicates on SOAP port 80.

The following SOA APIs are used:

  • Insert
  • Update
  • getKeys
  • get
  • getRecords

The following role types are required:

  • soap_create
  • soap_query
  • soap_query_update
  • soap_update

The following Table and Field permissions are provided.

Required Table and Field Permissions for CMDB Outbound Integration

Main Table Permissions

ServiceNow Table

FortiSIEM Actions

Required Permissions

configuration item

[cmdb_ci]

  • Query
  • Insert
  • Update
  • Read
  • Write
  • Create
Running Process

[cmdb_running_process]

  • Query
  • Insert / Create
  • Update
  • Read
  • Write
  • Create
Software Instance

[cmdb_software_instance]

  • Query
  • Insert / Create
  • Update
  • Read
  • Write
  • Create

 

Extended Table Permissions

ServiceNow Table

FortiSIEM Actions

Required Permissions

cmdb_ci_linux_server
  • Query
  • Insert / Create
  • Update
  • Read
  • Write
  • Create
cmdb_ci_win_server
  • Query
  • Insert / Create
  • Update
  • Read
  • Write
  • Create
cmdb_ci_hpux_server
  • Query
  • Insert / Create
  • Update
  • Read
  • Write
  • Create
cmdb_ci_unix_server
  • Query
  • Insert / Create
  • Update
  • Read
  • Write
  • Create
cmdb_ci_aix_server
  • Query
  • Insert / Create
  • Update
  • Read
  • Write
  • Create
cmdb_ci_solaris_server
  • Query
  • Insert / Create
  • Update
  • Read
  • Write
  • Create
cmdb_ci_esx_server
  • Query
  • Insert / Create
  • Update
  • Read
  • Write
  • Create
cmdb_ci_web_server
  • Query
  • Insert / Create
  • Update
  • Read
  • Write
  • Create

cmdb_ci_app_server_java

  • Query
  • Insert / Create
  • Update
  • Read
  • Write
  • Create

cmdb_ci_app_server_tomcat

  • Query
  • Insert / Create
  • Update
  • Read
  • Write
  • Create

cmdb_ci_app_server_weblogic

  • Query
  • Insert / Create
  • Update
  • Read
  • Write
  • Create

cmdb_ci_app_server_websphere

  • Query
  • Insert / Create
  • Update
  • Read
  • Write
  • Create

cmdb_ci_app_server_jboss

  • Query
  • Insert / Create
  • Update
  • Read
  • Write
  • Create

cmdb_ci_netware_server

  • Query
  • Insert / Create
  • Update
  • Read
  • Write
  • Create

cmdb_ci_database

  • Query
  • Insert / Create
  • Update
  • Read
  • Write
  • Create

cmdb_ci_vpn

  • Query
  • Insert / Create
  • Update
  • Read
  • Write
  • Create

cmdb_ci_ip_router

  • Query
  • Insert / Create
  • Update
  • Read
  • Write
  • Create

cmdb_ci_netgear

  • Query
  • Insert / Create
  • Update
  • Read
  • Write
  • Create

cmdb_ci_ups

  • Query
  • Insert / Create
  • Update
  • Read
  • Write
  • Create

cmdb_ci_printer

  • Query
  • Insert / Create
  • Update
  • Read
  • Write
  • Create

cmdb_ci_network_adapter

  • Query
  • Insert / Create
  • Update
  • Read
  • Write
  • Create

cmdb_ci_storage_disk

  • Query
  • Insert / Create
  • Update
  • Read
  • Write
  • Create

 

Reference Table Permissions

ServiceNow Table

FortiSIEM Actions

Required Permissions

Company

[core_company]

  • Query
  • Read

 

Reference Field Permissions

Field ServiceNow Table Required Permissions Need write_role
company core_company
  • Read

  • Write

Yes. The default role in ServiceNow is : admin

 

Regular Field Permissions

Need Read/Write and write_role is not required.

Required Table and Field Permissions for Incident Outbound Integration

Main Table Permissions

ServiceNow Table

FortiSIEM Actions

Required Permissions

Incident

[incident]

  • Query
  • Insert / Create
  • Update
  • Read
  • Write
  • Create

 

Reference Table Permissions

ServiceNow Table

FortiSIEM Actions

Required Permissions

Company

[core_company]

  • Query
  • Read

 

Reference Field Permissions

Field

ServiceNow Table

Required Permissions

Need write_role

assigned_to sys_user
  • Read

Yes. The default role in ServiceNow is : itil
company core_company
  • Read

  • Write

Yes. The default role in ServiceNow is: admin

 

Regular Field Permissions

Field

Required Permissions

Need write_role

state
  • Read

Yes. The default role in ServiceNow is : itil

comments

  • Read
  • Write

Yes. The default role in ServiceNow is : itil

closed_by

  • Read

Yes. The default role in ServiceNow is : itil

short_description

  • Read
  • Write

Yes. The default role in ServiceNow is : itil

impact

  • Read
  • Write

Yes. The default role in ServiceNow is : itil

urgency

  • Read
  • Write

Yes. The default role in ServiceNow is : itil

closed_at

  • Read

Yes. The default role in ServiceNow is : admin

work_notes

  • Read
  • Write

Yes. The default role in ServiceNow is : itil

Active

  • Read
  • Write

No