PermissionsMoveworks Setup Access Controls

Mirror Permissions

View as Markdown

Overview

If you already have access control rules inside ServiceNow, Moveworks can ingest those permissions to natively support your access control rules for Forms & Knowledge. With Platform Permissions, Moveworks integrates directly with ServiceNow to import User Criteria, User Entitlements, or Roles defined in ServiceNow into the Moveworks platform, and follow the defined User Criteria restrictions accordingly.

Note: This functionality is planned to be extended to more systems.

Architecture

Every 24 hours, Moveworks will import access control restrictions directly from ServiceNow.

What can be achieved from this module?

With ACL ingestion, you can:

  1. Select the system from which you would want to ingest permissions (currently supported for limited systems)
  2. Ingest Form access controls from the system
  3. Ingest Knowledge access controls from the system
  4. Enable evaluation of user permission for a specific resource in question
  5. Set a policy of denying everyone access to a Knowledge Article if there is no user criteria associated with it

Configurations Steps

  1. Select the Integration. Select the source for which you want to ingest user permissions.
  2. Enable Fetch Form Access Controls. This option allows ingesting Forms access controls from this source.
  3. Enable Fetch Knowledge Base Access Controls. This option allows ingesting KBs access controls from this source
  4. Enable Evaluate User Criteria. This option allows evaluating user criteria (if defined), when enabled.
  5. (Optional) Select Block access for Knowledge Base Articles with no User Criteria. This option allows setting a policy of denying everyone access to a KB if there is no user criteria associated with it.
  6. (Optional) Check legacy entitlements. Select this option if your organization still uses legacy service catalog access controls using entitlements. ServiceNow recommends all customers switch over to User Criteria for more security. Do not enable this if you have already enabled user criteria.

FAQs

  1. What are the supported systems for permissions?
    1. You can view the table here that contains the supported integrations and whether permissions mirroring is supported or not: /docs/content-integrations#/
  2. What is the ingestion schedule of access permissions?
    1. Every 24 hours, Moveworks will import access control restrictions directly from ServiceNow.