<h2>SNC access control plugin</h2><br/><div style="overflow-x:auto"> <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head><meta content="text/html; charset=UTF-8" /><meta name="copyright" content="(C) Copyright 2023" /><meta name="DC.rights.owner" content="(C) Copyright 2023" /><meta name="generator" content="DITA-OT" /><meta name="DC.type" content="reference" /><meta name="DC.title" content="SNC access control plugin" /><meta name="abstract" content="Activate the SNC Access Control (com.snc.snc_access_controlcom.snc.snc_access_control) plugin to control access to your instances by Customer Service and Support personnel." /><meta name="description" content="Activate the SNC Access Control (com.snc.snc_access_controlcom.snc.snc_access_control) plugin to control access to your instances by Customer Service and Support personnel." /><meta name="DC.creator" content="Claire Rawlins" /><meta name="DC.creator" content="Phil Salzman" /><meta name="DC.creator" content="ServiceNow" /><meta name="DC.date.created" content="2023-08-03" /><meta name="DC.date.modified" content="2023-08-03" /><meta name="mini-toc" content="yes" /><meta name="DC.format" content="XHTML" /><meta name="DC.identifier" content="sc-snc-access-control-plugin" /><link rel="stylesheet" type="text/css" href="../../../CSS/commonltr.css" /><title>SNC access control plugin</title></head><body id="sc-snc-access-control-plugin"> <h1 class="title topictitle1" id="ariaid-title1">SNC access control plugin</h1> <div class="body refbody"><p class="shortdesc">Activate the SNC Access Control (com.snc.snc_access_control<span class="keyword parmname">com.snc.snc_access_control</span>) plugin to control access to your instances by <span class="ph">Customer Service and Support</span> personnel.</p> <div class="section" id="sc-snc-access-control-plugin__section_overview_other">The default configuration for the <span class="ph">Now Platform</span> enables <span class="ph">Customer Service and Support</span> to access instances through an internal process that creates short-term support credentials. Although all access is audited, some customers prefer to control this access.<p class="p">This plugin enables Customer Service and Support to prohibit <span class="ph">Customer Service and Support</span> employees from accessing the instance. This decision does have an impact on support SLAs because you must enable <span class="ph">Now Platform</span> access before support activities can begin. To learn more, see <a class="xref" href="../../security/concept/c_SNCAccessControl.html" title="The SNC Access Control plugin (com.snc.snc_access_control) enables you to control which Customer Service and Support employees can access your instance, and when.">ServiceNow access control</a>.</p> </div> <div class="section" id="sc-snc-access-control-plugin__section_more_information"><h2 class="title sectiontitle">More information</h2> <div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="sc-snc-access-control-plugin__table_ajc_b43_3kb" class="table" frame="border" border="1" rules="all"><colgroup><col style="width:40%" /><col style="width:60%" /></colgroup><thead class="thead" style="text-align:left;"><tr class="row"><th class="entry cellrowborder" style="vertical-align:top;" id="d344682e98">Attribute</th><th class="entry cellrowborder" style="vertical-align:top;" id="d344682e101">Description</th></tr></thead><tbody class="tbody"><tr class="row"><td class="entry cellrowborder" style="vertical-align:top;" headers="d344682e98 ">Plugin Name</td><td class="entry cellrowborder" style="vertical-align:top;" headers="d344682e101 "><span class="keyword parmname">com.snc.snc_access_control</span></td></tr><tr class="row"><td class="entry cellrowborder" style="vertical-align:top;" headers="d344682e98 ">Configuration type</td><td class="entry cellrowborder" style="vertical-align:top;" headers="d344682e101 ">System Definition > Plugins</td></tr><tr class="row"><td class="entry cellrowborder" style="vertical-align:top;" headers="d344682e98 ">Category</td><td class="entry cellrowborder" style="vertical-align:top;" headers="d344682e101 "><a class="xref" href="sc-access-control.html" title="The access control category audits the process of protecting resources from unauthorized access through granting and denying requests based on a permission model. This includes ensuring an entity accessing a resource holds valid credentials to do so, creating and protecting a well-defined set of roles or permissions and ensuring role or permission controls are protected from replay and tampering.">Access control</a></td></tr><tr class="row"><td class="entry cellrowborder" style="vertical-align:top;" headers="d344682e98 ">Purpose</td><td class="entry cellrowborder" style="vertical-align:top;" headers="d344682e101 ">Prohibits <span class="ph">Customer Service and Support</span> employees from accessing the instance</td></tr><tr class="row"><td class="entry cellrowborder" style="vertical-align:top;" headers="d344682e98 ">Recommended value</td><td class="entry cellrowborder" style="vertical-align:top;" headers="d344682e101 ">Active</td></tr><tr class="row"><td class="entry cellrowborder" style="vertical-align:top;" headers="d344682e98 ">Role required</td><td class="entry cellrowborder" style="vertical-align:top;" headers="d344682e101 ">The customer administrator can't activate this plugin. It must be explicitly requested because it requires elevated privileges to activate the plugin.</td></tr><tr class="row"><td class="entry cellrowborder" style="vertical-align:top;" headers="d344682e98 ">Security risk rating</td><td class="entry cellrowborder" style="vertical-align:top;" headers="d344682e101 ">8.2</td></tr><tr class="row"><td class="entry cellrowborder" style="vertical-align:top;" headers="d344682e98 ">Functional impact</td><td class="entry cellrowborder" style="vertical-align:top;" headers="d344682e101 ">(Low) If this plugin is inactive, all <span class="ph">Customer Service and Support</span> employees can access the customer's instance. Enabling the plugin enables the customer to restrict access to authorized <span class="ph">Customer Service and Support</span> employees only.</td></tr><tr class="row"><td class="entry cellrowborder" style="vertical-align:top;" headers="d344682e98 ">Security risk</td><td class="entry cellrowborder" style="vertical-align:top;" headers="d344682e101 ">(High) Unnecessary exposure of instance access to wider group of people.</td></tr><tr class="row"><td class="entry cellrowborder" style="vertical-align:top;" headers="d344682e98 ">References</td><td class="entry cellrowborder" style="vertical-align:top;" headers="d344682e101 "><a class="xref" href="../../security/concept/c_SNCAccessControl.html" title="The SNC Access Control plugin (com.snc.snc_access_control) enables you to control which Customer Service and Support employees can access your instance, and when.">ServiceNow access control</a></td></tr></tbody></table> </div> </div> <div class="section" id="sc-snc-access-control-plugin__section_vk3_jrk_jkb"><h2 class="title sectiontitle">Steps to configure</h2> <ol class="ol" id="sc-snc-access-control-plugin__ol_mqn_ql3_nkb"><li class="li">To request the plugin, follow the steps in <a class="xref" href="../../security/task/t_ActivateSNCAccessControl.html" title="You request activation of the SNC Access Control plugin (com.snc.snc_access_control).">Activating ServiceNow access control</a>. Customers must request the SNC Access Control plugin (com.snc.snc_access_control) from HI.</li><li class="li">To enable SNC access control, follow the steps in <a class="xref" href="../../security/task/t_ConfigureAccessControl.html" title="Configure an access control record to specify one or more Customer Service and Support employees who have permission to log in your instance.">Configuring ServiceNow access control</a>. Configure an access control record to specify one or more <span class="ph">Customer Service and Support</span> employees that have permission to log in your instance.</li></ol> </div> </div> </body></html></div>