Elsewhere in the platform, permissions are assigned using roles and role auditing is available OOB. In HRSD, however, groups are used to give permission to the COEs and, quite surprisingly, there isn’t any auditing OOB for group membership. This lack of auditing will give most IT security folks a heart attack, so to avoid that,…

In the old ServiceNow dashboards, you could select a “drilldown view” as the view that would be displayed for the list when the user clicks on the number in a single score report. This option is not available in Platform Analytics visualizations. The best I can come up with for a workaround is to select…

Powershell Script Custom Action – ECC Queue Request Script Include in Scoped Application for GlideSysAttachment.writeBase64 We need to use the writeBase64 method of the GlideSysAttachment class, however this only works in a scoped application. Every other artifact has been created in a global app, so we need to either create a scoped app for this…

After installing the Column Level Encryption plugin (com.glide.encryption), the navigation module for Field Encryption Modules is not visible. This is because this module is only visible to sn_kmf.cryptographic_manager and sn_kmf.cryptographic_auditor roles, and though they are included in the sn_kmf.admin role, the sn_kmf.admin role requires elevation. To resolve this:

It’s a good idea to have regular audits/reviews of COE security policies and HR groups to ensure that the permissions are setup as intended. This custom functionality provides a mechanism of performing audits/reviews with an HR case. The basic idea of this functionality is Here’s how to set it up: HR Service Create an HR…

I was trying to get all of the unique sys_id’s of groups that were included in HRSD COE Security Policies using the below query However, this was not producing unique results, the same sys_ids were being added repeatedly to the array. After some googling I realized that this was due to a problem with the…

When you have sibling records, i.e. records that are somehow related to each other but that don’t have a parent, one way to relate them is with a list field. The below script can be put into a business rule on the table, triggered to run when the list field changes. This script goes to…

I have an html annotation in a form with a link that gets updated yearly. I was looking for a way to dynamically generate the link so that I wouldn’t have to remember (i.e. to be reminded) to update it on Jan 2nd and found this question in the community https://www.servicenow.com/community/now-platform-forum/dynamic-url-in-annotation-on-a-form/m-p/1263468 In this question, howard8…