Verify the ServiceNow account permissions

You can use Postman® to validate that the service accounts have the necessary permissions for a successful integration. You can download and install Postman or use the web version.

Requirements

• A Postman account
• The Arctic Wolf Ticketing Permission Test collection package.
• ServiceNow service account credentials. This is the account that you used in the integration process.
• Your Postman tenant URL. This is the same URL that you used in the integration process.
• The sys_id of any existing incident ticket
• The sys_id for your company

Before you begin

• Complete Configuring ServiceNow Integration®.
• If you want to install Postman, see the Postman Downloads page, and then install the correct version for your platform.

Steps

1. Import data into Postman.
2. Test the service account permissions.

Step 1: Import data into Postman

1. Download and extract the Arctic Wolf Ticketing Permission Test collection file.

2. Sign in to the Postman application.

3. In the navigation menu, click Import.

4. Navigate to the folder that contains the Arctic Wolf Ticketing Permission Test collection.

5. Click awn-ticketing-permission-test.postman_collection_1.2.json.

6. Click Import.

   The new collection populates in the Collections panel.

Step 2: Test the service account permissions

1. In the Collections panel, click Arctic Wolf Ticketing Permission Test.

2. On the Authorization tab, enter the username and password for the service account that you used for the ticketing integration.

3. Click the Variables tab.

4. For the base_url variable, in the Initial Value and Current Value columns, enter the ServiceNow URL.

5. Complete the priority test:

   1. In the Arctic Wolf Ticketing Permission Test section, click Priority List Values.

   2. On the Priority List Values page, click Send.

   3. Review the results. A successful request returns a 200 OK status response.

      Example of expected output:

      {
      "result": [
          {
              "urgency": {
                  "display value": "1 - High",
                  "value": "1"
                  },
              "impact": {
                  "display value": "1 - High",
                  "value": "1"
                  },
              "priority": {
                  "display value": "1 - High",
                  "value": "1"
                  }
              }
          ]
      }

6. Complete the ticket comments test:

   1. In the Arctic Wolf Ticketing Permission Test section, click Ticket Comments.

   2. On the Params tab, in the Value column, replace {ticketsys_id} with the incident ticket sys_id.

   3. Click Send.

   4. Review the results. A successful request returns a 200 OK status response.

      Example of expected output:

      {
      "result": [
          {
          "sys_id": "<sys_id>",
          "sys_created_on": "2023-01-18 18:06:38",
          "name": "incident",
          "element_id": "<element_id>",
          "sys_tags": "",
          "value": "testing",
          "sys_created_by": "admin",
          "element": "comments"
          }
          ]
      }

      Note: If the request returns a 200 OK status response but no content in the output, the service account does not have the right level of permissions. Contact your Concierge Security® Team (CST) at security@arcticwolf.com for support.

7. Complete the incident state test:

   1. In the Arctic Wolf Ticketing Permission Test section, click Incident State Values.

   2. Click Send.

   3. Review the results. A successful request returns a 200 OK status response.

      Example of expected output:

      {
      "result": [
          {
          "dependent_value": "",
          "synonyms": "",
          "sys_mod_count": "0",
          "language": "en",
          "label": "New",
          "sys_updated_on": "2022-08-24 04:01:28",
          "sys_domain_path": "",
          "sys_tags": "",
          "sequence": "1"
          }
          ]
      }

8. Complete the company field test:

   1. In the Arctic Wolf Ticketing Permission Test section, click Write to Company Field.

   2. Click Body.

   3. Replace <company sys_id> with the sys_id for your company.

      For example:

      {
      
      "short_description":"Arctic Wolf Test - SN Permission",
      
      "company":"{company sys_id}"
      
      }

   4. Click Send.

   5. Review the results. A successful request returns a 201 OK status response.

9. In your ticketing system, remove the incident ticket that you created in the API testing process named Arctic Wolf Test — SN Permission.

See also

• Installing and updating Postman
• Importing and exporting data
• Building requests