{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":40347,"path":"platform-security/access-control/use-sgt.md","title":"Use Scripting Governance Tool","bundle":null,"doc_type":null,"release":"australia","body":"\n# Use Scripting Governance Tool\n\nUse the Scripting Governance Tool to provide a single, centralised control for managing scripting access across your ServiceNow AI Platform.\n\n## Before you begin\n\nRole required: security\\_admin\n\n**Important:** You must have elevate your role `security_admin`. See [Elevate to a privileged role](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/t_ElevateToAPrivilegedRole.md).\n\nThe Scripting Governance Tool helps you review user scripting governance your ServiceNow AI Platform. The **Conditional Script Writer** group grants scripting permissions to its members via the `snc_required_script_writer_permission` role. Users are added to the group by either an automated assignment or manual configuration. You can manage both of these settings from the Scripting Governance Tool.\n\n## Procedure\n\n1.  Navigate to **All** &gt; **System Security** &gt; **Scripting Governance Tool**.\n\n2.  Use the following features to learn more:\n\n<table id=\"table_j3q_mjm_w3c\"><thead><tr><th>\n\nFeatures\n\n</th><th>\n\nDescription\n\n</th></tr></thead><tbody><tr><td>\n\nUsers in Conditional Script Writer Group\n\n</td><td>\n\nDisplays the number of users in the **Conditional Script Writer** group. These users are granted the `snc_required_script_writer_permission` until removed from the group.\n\n</td></tr><tr><td>\n\nAuto-assignment\n\n</td><td>\n\nAuto-assignment assigns new users to the **Conditional Script Writer** group if the users are `internal users` and has one functional role. You can select the slider to de-activate.**Note:** It is recommended to de-activate auto-assignment.\n\n</td></tr><tr><td>\n\nScan for users who have scripted \\(Recommended\\)\n\n</td><td>\n\nScans for users in the ServiceNow AI Platform who have modified records containing script fields such as business rules, script includes, or client scripts. When running the scan, you can define a time period for which the scan checks.\n\n</td></tr><tr><td>\n\nManual Configuration\n\n</td><td>\n\nYou can manually select users that stay in the **Conditional Script Writer** group. Select the **Manage scripting access** button and enter the users into the text field for manually managing the user removal process from the **Conditional Script Writer** group.\n\n</td></tr><tr><td>\n\nGroups containing a scripting role\n\n</td><td>\n\nDisplays the number of groups that contain a scripting role. By default the **Conditional Script Writer** group has a scripting role.**Note:** It is recommended to manage scripting access exclusively through the **Conditional Script Writer** group. Adding the `snc_required_script_writer_permission` role as a child role to other roles or groups reduces your ability to centrally control who can script on your instance.\n\n</td></tr><tr><td>\n\nRoles containing a scripting role\n\n</td><td>\n\nDisplays the number of roles that contain a `snc_required_script_writer_permission` role.**Note:** It is recommended to manage scripting access exclusively through the **Conditional Script Writer** group. Adding the `snc_required_script_writer_permission` role as a child role to other roles or groups reduces your ability to centrally control who can script on your instance.\n\n</td></tr><tr><td>\n\nView scans\n\n</td><td>\n\nAfter you run the scan, the details of the scan are displayed on the View scans.\n\n</td></tr><tr><td>\n\nView removals\n\n</td><td>\n\nWhen you schedule for removal of user from the **Conditional Script Writer** group, the details are displayed on the View removals.\n\n</td></tr></tbody>\n</table>    \\[Omitted image \"scripting-governance-dashboard.png\"\\] Alt text: Scripting Governance Tool dashboard\n\n\n## Result\n\nYou can view the following topics to understand how you can:\n\n-   [Scan for users who have scripted](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/access-control/scan-for-users-who-have-scripted.md)\n-   [Remove users from the Conditional Script Writer group](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/access-control/remove-conditional-script-writer-users.md)\n\n"}}