---
title: ServiceNow Incident Connector Permissions
slug: rbvm-help/servicenow-incident-connector-permissions
createdAt: 2026-10-26T13:51:24.593Z
---

**Summary**: A detailed guide on permissions required for the ServiceNow Incident connector in RiskSense.

The user role needs to be web\_service\_admin.

The following permissions are required to obtain the form dynamically from ServiceNow:

Read access to the following tables and the columns inside the tables.

1. sys\_db\_object
   1. Extends table (super\_class)
2. sys\_dictionary table:
3. Type (internal\_type)
   1. Reference (reference)
   2. Column name (element)
   3. Column label(column\_label)
   4. Table (name)
   5. Dependent(dependent)
   6. Dependent on field(dependent\_on\_field)
   7. Mandatory (mandatory)
   8. Choice (choice)
   9. Max Length (max\_length)
4. sys\_glide\_object
5. sys\_choice
   1. Label (label)
   2. Value (value)
   3. Element (element)
   4. Dependent value (dependent\_value)

The role must have create, read, and write access to the incident table. The role must also have read access to the reference fields in the incident form to the ones the user wants to modify.

Reasons for These Permissions:

- sys\_db\_object table access is required to find the table name from which the incident table is inherited.
- sys\_dictionary table access is required to show a list of all the field that is part of an incident table and its parent table. To access this table, the user must have the following roles as well:
  - personalize\_dictionary
  - personalize\_read\_dictionary
- sys\_glide\_object table access is required to know what kind of field that was retrieved from sys\_dictionary. It only requires table-level access and not field-level access.
- sys\_choice table access is required to know the choices of the field whose values are derived from that table.

The client can also restrict the data by adding an additional constraint on the ACL to prevent additional data access.

In the following screenshots, 'task' is the superclass of the 'incident' table.

::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/v3PTmA0cKprIHCp151VtD_servicenow.png" position="flex-start" size="98" width="687" height="377" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/ServiceNow.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/ServiceNow.png" showCaption="false"}

::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/qQV1s1UnwivMpdiUyEtk8_servicenow1.png" position="flex-start" size="98" width="688" height="405" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/ServiceNow_1.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/ServiceNow_1.png" showCaption="false"}

::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/0Q4oLFDykyXpgqT3TBU0q_servicenow2.png" position="flex-start" size="98" width="687" height="382" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/ServiceNow_2.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/ServiceNow_2.png" showCaption="false"}

::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/JGCpDBBYW8qU1_rziY708_servicenow3.png" position="flex-start" size="98" width="688" height="400" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/ServiceNow_3.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/ServiceNow_3.png" showCaption="false"}

Permissions For Reference Dropdowns:

RiskSense fetches the records from the reference table from ServiceNow and shows the dropdowns for all reference dropdowns. To show the dropdown in RiskSense, a key and value for the dropdown are needed.

For all the reference tables, the value is a sys\_id column in the table except for the 'sys\_choice' table, where value is the 'value' column. DisplayValue is retrieved based on the reference table.

Steps to find the DisplayValue field for reference field:

1. Find the parent table for the reference table.
2. Filter sys\_dictionary table with the table is either a reference table or parent table and display is true.

Let the reference table be "sc\_cat\_item\_delivery\_plan", and it is inherited from a table "sys\_metadata". A list of permissions required are:

- Read access to the sys\_db\_object table, table-level and field-level access, and limit the table name "sc\_cat\_item\_delivery\_task" and "sys\_metadata".

::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/E-RGgdYjrbwk_akR2JYdf_servicenow4.png" position="flex-start" size="98" width="687" height="396" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/ServiceNow_4.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/ServiceNow_4.png" showCaption="false"}

Once we have permission, we can determine the parent table.

- Read access to the sys\_choice table, both table-level and field-level access, and also limit the access to table name "sc\_cat\_item\_delivery\_task" and "sys\_metadata".

::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/XJEi4dKVuPzWvWk5JaMID_servicenow5.png" position="flex-start" size="98" width="687" height="401" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/ServiceNow_5.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/ServiceNow_5.png" showCaption="false"}

Once we have permission, we can find the display Field showing the displayValue for the drop-down option.

- Read access to the "sc\_cat\_item\_delivery\_plan" both field level and table level to show the drop-down options.

::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/dUnOmzM9u1UoPo8spva0H_servicenow6.png" position="flex-start" size="98" width="686" height="378" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/ServiceNow_6.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/ServiceNow_6.png" showCaption="false"}