Cross-Scope Privilege API - ServiceNow Fluent

The Cross-Scope Privilege API defines cross-scope privileges [sys_scope_privilege] for runtime access tracking.

Note: For the latest ServiceNow Fluent API documentation and examples, see the ServiceNow Fluent API reference and ServiceNow SDK examples repository on GitHub.

Runtime access tracking allows administrators to manage script access to application resources by creating a list of script operations and targets that the system authorizes to run. For general information about cross-scope privileges, see Cross-scope privilege record.

Parent Topic:ServiceNow Fluent API reference

Related topics

ServiceNow Fluent

CrossScopePrivilege object

Configure cross-scope privileges [sys_scope_privilege] that determine which script operations and targets the system allows to run in the application.

<table id=“table_vy2_525_jq” class=“parameters”><thead><tr><th>

Name

</th><th>

Type

</th><th>

Description

</th></tr></thead><tbody><tr><td>

$id

</td><td>

String or Number

</td><td>

Required. A unique ID for the metadata object. When you build the application, this ID is hashed into a unique sys_id. For more information, see ServiceNow Fluent language constructs.Format: Now.ID['String' or Number]

</td></tr><tr><td>

status

</td><td>

String

</td><td>

Required. The authorization for this record.Valid values:

• requested

• allowed

• denied

</td></tr><tr><td>

operation

</td><td>

String

</td><td>

Required. The operation that the script performs on the target. The target type determines the available operations. Tables [sys_db_object] support the read, write, create, and delete operations. Script includes [sys_script_include] and script objects [sys_db_object] only support the execute operation.

Valid values:

• create

• delete

• read

• write

• execute

</td></tr><tr><td>

targetName

</td><td>

String

</td><td>

Required. The name of the table, script include, or script object being requested.

</td></tr><tr><td>

targetScope

</td><td>

String

</td><td>

Required. The application scope from which resources are requested.

</td></tr><tr><td>

targetType

</td><td>

String

</td><td>

Required. The type of request: script include, script object, or table.Valid values:

• sys_script_include

• scriptable

• sys_db_object

</td></tr><tr><td>

$meta

</td><td>

Object

</td><td>

Metadata for the application metadata.With the installMethod property, you can map the application metadata to an output directory that loads only in specific circumstances.

$meta: {
      installMethod: 'String'
}

Valid values for installMethod:

• demo: Outputs the application metadata to the metadata/unload.demo directory to be installed with the application when the Load demo data option is selected.

• first install: Outputs the application metadata to the metadata/unload directory to be installed only the first time an application is installed on an instance.

</td></tr></tbody> </table>“‘javascript import { CrossScopePrivilege } from ’@servicenow/sdk/core’

CrossScopePrivilege({ $id: Now.ID[‘cross_1’], status: ‘allowed’, operation: ‘execute’, targetName: ‘Script type’, targetScope: ‘x_snc_example’, targetType: ‘scriptable’, })

“‘