If you choose not to use a read-only admin user, Quality Clouds must be granted access to required ServiceNow tables via ACLs.
You can:
- Manually create ACLs (time-consuming), or
- Apply the Quality Clouds Update Set (recommended)
Quality Clouds Non-Admin Update Set #
Applying the Update Set automatically configures access by:
Creating Role
- qc_access
Assigning Roles to qc_access
- business_rule_admin
- catalog_admin
- client_script_admin
- data_policy_admin
- form_admin
- import_admin
- personalize_styles
- script_include_admin
- sn_change_write
- sp_admin
- ui_action_admin
- ui_policy_admin
- ui_script_admin
- web_service_admin
- workflow_admin
- sn_appclient.app_client_user (since v24.8.0 – Application Scans)
Read-Only ACLs Created for Admin-Only Tables #
The Update Set grants read-only access to the following tables:
- sys_app_category
- sys_dictionary_override
- sys_data_policy2
- sys_script_email
- sys_script_pattern
- sys_security_acl
- sysevent_script_action
- sysevent_in_email_action
- syslog_transaction
- wf_workflow_version
- v_index_creator (since v22.1.1.0)
- sys_user.roles (roles column only – since v22.2.1.0)
- scheduled_import_set
- sysauto_bm_script
- sysauto_pa
- sysauto_query_builder
- sysauto_scripts
- sysauto_summary_generator
- sysauto_report
- sysauto_template
- sysauto_custom_chart
- sys_update_set (since v24.8.0 – Update Set Scans)
- sys_app (since v24.8.0 – Update Set Scans)
- sys_db_object
Important Notes #
- Conflicting custom ACLs must be resolved manually
- Ensure the qc_access role is assigned to the scan user
Role Change (Since v22.1.1.0) #
- The old qc_access_role is deprecated
- You must re-assign qc_access to the scan user if upgrading
Update Set Download #
Version: 24.11.0.0
File: Quality Clouds Non Admin Configuration v24.11.0.0.xml
Update Set LiveCheck Changes (v24.11.0.0)
#
LiveCheck now retrieves Update Set contents directly from:
- sys_update_xml (instead of sys_update_version)
Requirements
- Admin user OR
- Non-admin user with latest Update Set applied
Without Update Set
- LiveCheck falls back to sys_update_version
- Results usually correct but may be incomplete
- Status will be Warning
Update Sets for Operational Scans (Optional)
Required only if Operational Scans (Admin Bot) are enabled.
Base Update Set must be installed first.
Read-Only Access Granted To:
- cmn_department
- sys_user (fields: user_name, active, last_login)
- sys_user_role (via usage_admin)
- sys_user_has_role
Operational Scans Update Set #
|
QC Version |
Release Date |
Update Set |
|
22.2.1.0 |
April 29, 2020 |
