21.2 Configuration for Elevated Access

Prerequisites:

  • The user to whom you are providing access should be configured in ServiceNow.

  • The machine to which you are granting access must be configured in ServiceNow.

  • The user can get access to the machine only when the ServiceNow incident is in the active state.

To provide elevated access to a Linux machine through ServiceNow incident, configure the following:

  1. Click Command Control > Rules > Add Policy Template and import the following policy templates:

    • ServiceNow Request Elevated Access: This is used to provide elevated access.

    • ServiceNow Update Incident: This is used to allow user to add comments to the ServiceNow incident.

    • ServiceNow Close Incident: This is used to resolve the ServiceNow incident.

    For more information about using the policy template, see Adding a Policy Template.

  2. Edit the ServiceNow application configuration in the new Administration Console:

    1. Click Vault > Application > Applications.

    2. Select the edit icon next to the newly added resource ServiceNow_Credentials.

    3. Specify the HostName and Port of ServiceNow.

    4. Click edit icon next to the appropriate credentials.

    5. Specify the User Name and Password of ServiceNow.

  3. Edit the ServiceNow rules, RL-SERVICENOW-PRIV-ACCESS, RL-SERVICENOW-UPDATE, and RL-SERVICENOW-CLOSE as follows:

    1. Click Rules and select the required rule.

    2. Click Script Arguments in the last pane and modify the following:

      Account: This is the credential that is used to access ServiceNow. This must be same as the user name mentioned in Step 2e.

      Vault: The resource which contains the ServiceNow connection details such as, IP address, and port number. This must be the name of the resource configured in Step 2b.

      Users: Linux users as whom the user can be elevated. You can enter multiple values separated by space. For example, User1 User2 User3.

    3. Click Finish.

    4. Deselect Disable to enable the rule and click Apply.