> For the complete documentation index, see [llms.txt](https://docs.dropzone.ai/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.dropzone.ai/integrations/data/servicenow_data.md).

# ServiceNow

## ServiceNow

Dropzone AI integrates with [ServiceNow](https://www.servicenow.com/now-platform.html), a cloud-based platform that provides digital workflow automation. Dropzone supports two methods of authentication for this integration: Basic and OAuth Inbound.

{% hint style="info" %}
If you wish to use Basic authentication, you may skip to the "Enable ServiceNow" section of this document.
{% endhint %}

### Create an OAuth Application User

To grant Dropzone access to [tables](https://www.servicenow.com/docs/r/washingtondc/api-reference/rest-apis/c_TableAPI.html) for use in analysis, you will need to add a user (either a dedicated Dropzone User or another user) to an [access control list](https://www.servicenow.com/docs/r/platform-security/access-control/exploring-access-control-list.html). Alternatively, you may use an administrative user as your OAuth Application User, which will allow Dropzone access to most organizational data and tables.

{% hint style="info" %}
If you choose to use an admin user, you may skip to the "Create an OAuth Inbound Integration" section of this document.
{% endhint %}

\### Create a New Role

To create a new role, do so, do the following:

* In the top bar of the ServiceNow home page, click "All"
* In the search bar, navigate to System Security > Users and Groups > Roles

<figure><img src="/files/SekecNK3zNqQ6CxxxoxR" alt=""><figcaption><p>Navigate to Roles</p></figcaption></figure>

* Click "New"

<figure><img src="/files/BOrZtwQIXr4ZMHBr5Ldy" alt=""><figcaption></figcaption></figure>

* Name the role something memorable, such as "dz\_table\_read"
* Click "Submit"

<figure><img src="/files/XpgJAV8mNPmXHAADzUL6" alt=""><figcaption><p>Create a new role</p></figcaption></figure>

#### Create an Access Control List

To create an ACL, do the following:

* In the upper right corner, click your icon
* Click "Elevate Role"

<figure><img src="/files/thh8K2hSwd1RE38lKyWg" alt=""><figcaption><p>Elevate your role</p></figcaption></figure>

* Select security\_admin

<figure><img src="/files/ycG2wuh9keSJkEY2nSfH" alt=""><figcaption></figcaption></figure>

{% hint style="info" %}
For more information on elevated roles, see [ServiceNow's documentation](https://www.servicenow.com/docs/r/platform-security/c_ElevatedPrivilege.html#:~:text=to%20manually%20elevate-,The%20security_admin%20role,-In%20the%20base)
{% endhint %}

* Navigate to All > System Security > Access Control (ACL)
* Click "New"

<figure><img src="/files/BOrZtwQIXr4ZMHBr5Ldy" alt=""><figcaption></figcaption></figure>

* Under "Operation," select "read"
* Under "Name," input a table you want Dropzone to have read access to

<figure><img src="/files/HGo6eJKIITex7GCLSesq" alt=""><figcaption><p>Assign the ACL scope</p></figcaption></figure>

* Under "Role," input the role you created earlier, e.g. dz\_table\_read

<figure><img src="/files/W7T8Turr8wQuqykdOXkl" alt=""><figcaption><p>Input the new role</p></figcaption></figure>

* Click "Submit"

<figure><img src="/files/b5Fs92xFd8L0whD7mjF2" alt=""><figcaption></figcaption></figure>

Repeat for every table you want Dropzone to have access to

#### Assign the ACL to the Role

* Navigate back to Roles
* Click on the role you just created
* In the "Modules with Role" section, click "New"

<figure><img src="/files/koAkEQjHyxkz1dtc3NIb" alt=""><figcaption></figcaption></figure>

* Name the record with the name of the table in question
* Click "Link Type"
* Under "Table," select your desired table

<figure><img src="/files/qBLqs8tCFv2e7vvODheY" alt=""><figcaption></figcaption></figure>

* Click "Submit"

Repeat for every table you want Dropzone to have access to

#### Create a Group

* Navigate to All > System Security > Users and Groups > Groups

<figure><img src="/files/oxdtHljbHEFwrHZiPn3W" alt=""><figcaption></figcaption></figure>

* Click "New"

<figure><img src="/files/BOrZtwQIXr4ZMHBr5Ldy" alt=""><figcaption></figcaption></figure>

* Name the role something memorable, such as "Dropzone AI"
* Assign yourself (or a dedicated Dropzone User) as the manager
* Click "Submit"

<figure><img src="/files/E476ekKu5H3KibCr2D5Z" alt=""><figcaption></figcaption></figure>

* Click "Group Members"
* Click "Edit"

<figure><img src="/files/3E1VAznoplPiBib37soh" alt=""><figcaption></figcaption></figure>

* In the search bar under "Collection," add yourself (or a dedicated Dropzone User)
* Click the `>` then click "Save"

<figure><img src="/files/StmrMMBdqQo3vjAooGVd" alt=""><figcaption></figcaption></figure>

* In the "Roles" section, click "Edit"

<figure><img src="/files/nc4kU8NQcNqLrvW90OAt" alt=""><figcaption></figcaption></figure>

* In the search bar under "Collection," add the role you created earlier
* Click the `>` then click "Save"

<figure><img src="/files/LAZlEDTEEFsgxlidRZrb" alt=""><figcaption></figcaption></figure>

The user associated with this group will be used as the OAuth Application User.

## Create an OAuth Inbound Integration

ServiceNow requires a Client ID and Client Secret to enable. To manage OAuth integrations, you must have access to a user with one of the following roles: oauth\_admin mi\_admin admin

To obtain a Client ID and Secret, do the following:

* Navigate to All > System OAuth > Inbound Integrations

<figure><img src="/files/iznrNqIpYtzjTDOa8tKC" alt=""><figcaption><p>Navigate to Inbound Integrations</p></figcaption></figure>

* In the upper right, click "New Integration"
* Select "OAuth - Client Credentials Grant"

<figure><img src="/files/2t6qmk3YgXBHcIRR8pOt" alt=""><figcaption></figcaption></figure>

* Name the client something memorable, such as "Dropzone AI"
* Under OAuth Application User, select the user you assigned earlier
* In the "Auth Scopes" section, click "Create auth scope"

<figure><img src="/files/TPFXdaqnbMDmruGTFyVp" alt=""><figcaption></figcaption></figure>

* Name the scope something memorable, such as "Dropzone"
* Assign the integration the Table API scope

<figure><img src="/files/lLyLdHKnmapEmVoKN3gW" alt=""><figcaption><p>Add the Table API scope</p></figcaption></figure>

* Click "Submit"
* Copy the Client ID and Client secret generated for use later in the Dropzone UI where they are called "Client ID" and "Client Secret" respectively

### Enable ServiceNow

To enable the Data Source integration, you will need the following information:

| Dropzone Field | Source                                                                                 |
| -------------- | -------------------------------------------------------------------------------------- |
| Instance URL   | Your ServiceNow instance URL, e.g. yourcompany.service-now\.com                        |
| Username       | The username of the admin user you are using. Only used for basic authentication       |
| Password       | The password for the aforementioned user's account. Only used for basic authentication |
| Client ID      | The Client ID value generated earlier                                                  |
| Client Secret  | The Client Secret value generated earlier                                              |

To enable the Data Source integration, do the following:

* Navigate to your Dropzone AI tenant home page e.g. https\://*mycompany*.dropzone.app
* In the bottom left hand corner, navigate to Settings > Integrations

<figure><img src="/files/zN02u3HObDaemUY8E1kD" alt=""><figcaption><p>Integrations Dropdown</p></figcaption></figure>

* Click "Available"

<figure><img src="/files/brI7n2Ux40Tk0jTwBCVh" alt=""><figcaption><p>Click Available</p></figcaption></figure>

* In the Search bar, search ServiceNow, then click "Configure"

<figure><img src="/files/ZuU40JmF7qAjkwCQxnh2" alt=""><figcaption><p>The ServiceNow Tile</p></figcaption></figure>

* Under the Data Source heading, input the Instance URL and select your method of authentication from the dropdown

<figure><img src="/files/vBed0sUrBOCk8Aai5DgK" alt=""><figcaption><p>The ServiceNow Data Source Configuration (pt 1)</p></figcaption></figure>

* If you selected Basic, input the username and password

<figure><img src="/files/xfbEXFs6FeNTNszb8JvQ" alt=""><figcaption><p>The ServiceNow Data Source Configuration (pt 2)</p></figcaption></figure>

* If you selected OAuthInbound, input the Client ID and Secret

<figure><img src="/files/ISs5dcurkxYIQhcrysAn" alt=""><figcaption><p>The ServiceNow Data Source Configuration (pt 3)</p></figcaption></figure>

* In the "Table and Query Pairs" section, you must add the [ServiceNow tables](https://www.servicenow.com/docs/r/washingtondc/api-reference/rest-apis/c_TableAPI.html) you want Dropzone to access
* To do so, input the name of the table (such as "incident" or "asset") in the Table Name section
* Under "Encoded Query," input a ServiceNow [encoded query string](https://www.servicenow.com/docs/r/platform-user-interface/c_EncodedQueryStrings.html)
* Click "Add Item" to add more tables

<figure><img src="/files/1Nkdr4kUbPkLFudVdZ7X" alt=""><figcaption><p>The ServiceNow Data Source Configuration (pt 4)</p></figcaption></figure>

* Click "Test & Save" to finish

If you have any errors or questions, engage your Dropzone AI support representative.
