Learn about credentials, users, and user permissions you must configure to let Service Mapping access and discover applications inside your organization private network.

Configure the relevant requirements to enable successful top-down discovery:
Host credentials
Service Mapping uses credentials of the hosts to access applications running on this host. Typically, host credentials are enough for top-down discovery. For example, to discover the HP Service Manager Application Server, configure only credentials for accessing the server hosting this application, SSH credentials, or Windows credentials.
Applicative credentials
To discover some applications, Service Mapping needs separate credentials from credentials of the host on which such applications run. This type of credentials is referred to in ServiceNow as applicative credentials. For example, to discover the ABAP SAP Central Services (ASCS), configure applicative credential in addition to the host credentials.
Elevated rights for Unix-based hosts
For Unix-based hosts, configure on MID Servers, you must provide a user with sudo-level credentials on all Unix-based hosts in your organization. For example, if the server hosting ASCS is Unix-based, provide a user with elevated rights to be able to run discovery commands against this Unix-based server.
SNMP community credentials
Configure SNMP community credentials to allow Service Mapping and Discovery to query network devices using the SNMP protocol. For example, configure SNMP community credentials for A10 Networks Thunder ADC.
Users or user permissions
You may need to provide additional users or user permissions to run certain commands or access certain directories. For example, for ASCS, provide a user with permissions to run SOAP on RFC read table function.

The Now Platform provides a centralized way of configuring credentials for Discovery, Service Mapping, and other applications. It allows you to configure credentials for hosts and applications only once. If you have already configured host-related credentials for another application, you do not need to do it again for Service Mapping.

You can assign credentials to specific MID Servers or keep credential generic so all MID Servers can use them. MID Servers retrieve commands and credentials from the ServiceNow instance and apply them to discover CIs inside organization private network.
Figure 1. Assigning credentials to the MID Server that uses them to access CIs

Assigning credentials to the MID Server that uses them to access CIs
Use the following guidelines to decide for which MID Server to create credentials:
  • If all CIs, belonging to the same CI type, share a credential, you do not need to specify a MID Server for it. In that case, it is used on all MID Servers by default.
    Note: Specifying the MID Server when configuring credentials is optional.
  • If CIs of the same type and on the same network have different credentials, configure these credentials and define order in which Service Mapping uses them when trying to connect to these CIs.

In addition to generic credentials, you configure on MID Servers, you must configure sudo-level credentials on all Unix-based hosts in your organization.

If the MID Server does not have sufficient credentials to access a device or application, it can run Network Mapper (Nmap) commands to collect basic information without using credentials. Credential-less discovery with Nmap requires additional configuration as described in Install and uninstall Nmap on a MID Server.

Review the list of credentials necessary to discover hosts and applications supported in the base system.

Application CI type Configure this
AIX OS AIX Server [cmdb_ci_aix_server] Give the user elevated rights to be able to run Service Mapping commands requiring a privileged user.
IBM z/OS IBM zOS server Server [cmdb_ci_ibm_zos_server]
  • Run the USS service on the port 22 on the z/OS server.
  • On the Now Platform, configure SSH credentials.
  • Provide the user with the following permissions:
    • To write into the /tmp directory.
    • To see all user processes.
    • To run REXX scripts.
On the Now Platform, configure SSH credentials.
Provide the user with the following permissions:
  • To write into the /tmp directory.
  • To see all user processes.
  • To run REXX scripts.
HP UX OS HPUX Server [cmdb_ci_hpux_server] Give the user elevated rights to be able to run Service Mapping commands requiring a privileged user.
On the Now Platform, configure SSH credentials.
Linux OS Linux Server [cmdb_ci_linux_server] Give the user elevated rights to be able to run Service Mapping commands requiring a privileged user.
On the Now Platform, configure SSH credentials.
Solaris OS Solaris Server [cmdb_ci_solaris_server] Give the user elevated rights to be able to run Service Mapping commands requiring a privileged user.
Windows OS Windows Server [cmdb_ci_windows_server] On the Now Platform, configure a domain user for accessing the Windows OS as described in Windows credentials.
Provide all necessary credentials and permissions as described in Credentials required for host discovery.
A10 Load Balancing A10 Load Balancer [cmdb_ci_lb_A10] Configure applicative credentials.
Configure SNMP credentials.
Windows Active Directory Domain Services Active Directory Domain Controller [cmdb_ci_ad_controller] On the Now Platform, configure a domain user for accessing the Windows OS as described in Windows credentials.
(Optional) For discovering using the WinRM protocol, see Configure WinRM trusted hosts on MID Server.
AWS DynamoDB DynamoDB Global Table [cmdb_ci_dynamodb_global_table]
  • On the AWS Console, provide a user with the following permissions: AmazonDynamoDBReadOnly Access and AWSLambdaInvocation-DynamoDB.
  • On the Now Platform®, configure AWS credentials, using a secret key and an access key.
Amazon Web Services (AWS) Elastic Load Balancing Load Balancer Service [cmdb_ci_lb_service] Configure Amazon Web Services credentials.
On the Now Platform, create a service account. Set the Account ID to the Amazon ELB account ID as it appears in the AWS Management Console.
Amazon Web Services (AWS) API Gateway Configure Amazon Web Services credentials.
On the Now Platform, create a service account. Set the Account ID to the Amazon account ID to which API Gateway belongs. Use the Account ID as it appears in the AWS Management Console.

Provide a user with permissions to run the apigateway:GET function for just the GET action in API Gateway.
Ensure to place the MID Server on the virtual machine that is part of the service account that you are planning to discover.
Amazon Web Services (AWS) Elastic Compute Cloud (EC2) Windows Server [cmdb_ci_windows_server] or Linux Server [cmdb_ci_linux_server] (If hosted on a Unix server), on the Now Platform, configure SSH credentials.
(If hosted on a Windows server) On the Now Platform, configure a domain user for accessing the Windows OS as described in Windows credentials.
On the Now Platform, create a service account. Set the Account ID to the Amazon account ID to which API Gateway belongs. Use the Account ID as it appears in the AWS Management Console.
Ensure to place the MID Server inside the Amazon cloud.
Amazon Web Services (AWS) Relational Database Service (RDS) Cloud DataBase [cmdb_ci_cloud_database] Configure Amazon Web Services credentials.
On the Now Platform, create a service account. Set the Account ID to the Amazon account ID to which RDS belongs. Use the Account ID as it appears in the AWS Management Console.
Ensure to place the MID Server inside the Amazon cloud.
Amazon Web Services (AWS) Lambda Cloud Function [cmdb_ci_cloud_function] Configure Amazon Web Services credentials.
On the Now Platform, create a service account. Set the Account ID to the Amazon account IT to which AWS Lambda belongs. Use the Account ID as it appears in the AWS Management Console.
Ensure to place the MID Server on the virtual machine that is part of the service account that you are planning to discover.

Provide a user with permissions to run the ListFunctions API with the Resource: arn:aws:lambda:region:account-id: function:function-name.

Provide a user with permissions to run the GetFunction API with the Resource: ‘*’.
Apache Tomcat Tomcat [cmdb_ci_app_server_tomcat] Give the user elevated rights to execute Service Mapping commands requiring a privileged user.
(If hosted on a Unix server), on the Now Platform, configure SSH credentials.
(If hosted on a Windows server) On the Now Platform, configure a domain user for accessing the Windows OS as described in Windows credentials.
(Optional) For discovering using the WinRM protocol, see Configure WinRM trusted hosts on MID Server.
Apache Tomcat WAR Tomcat WAR [cmdb_ci_app_server_tomcat_war] Give the user elevated rights to be able to run Service Mapping commands requiring a privileged user.
(If hosted on UNIX), on the Now Platform, configure SSH credentials.
(If hosted on a Windows server) On the Now Platform, configure a domain user for accessing the Windows OS as described in Windows credentials.
Apache Web Server Apache Web Server [cmdb_ci_apache_web_server] (If hosted on UNIX) Give the user elevated rights to be able to run Service Mapping commands requiring a privileged user.
On the server hosting the Apache Web Server, give the user permission to execute the following command: $APACHEHOME/bin/httpd –V.
On the server hosting the Apache Web Server, verify that the $APACHEHOME/bin/envvar file is configured with the correct native library path.
(If hosted on UNIX), on the Now Platform, configure SSH credentials.
(If hosted on a Windows server) On the Now Platform, configure a domain user for accessing the Windows OS as described in Windows credentials.
(Optional) For discovering using the WinRM protocol, see Configure WinRM trusted hosts on MID Server.
App TNS Service [cmdb_ci_appl_ora_tns] Give the user elevated rights to run Service Mapping commands requiring a privileged user.
(If hosted on a Windows server) On the Now Platform, configure a domain user for accessing the Windows OS as described in Windows credentials.
(If hosted on Linux or UNIX), on the Now Platform, configure SSH credentials.
F5 BIG-IP Global Traffic Manager (GTM) and F5 BIG-IP Local Traffic Manager (LTM) Load Balancer Service [cmdb_ci_lb_service]
  • Configure SNMP credentials.
    Note: If you do not want to use SSH credentials, you can use the REST API to create a connection to F5 BIG-IP devices.
  • (Optional) If there are iRules or SNMP community credentials are not enough for discovering outgoing connections, configure SSH credentials on Now Platform.

    Service Mapping uses the SSH credentials to retrieve connections that are not from CMDB. Discovering connections using the SSH protocol is a failover mechanism for the SNMP-based discovery.

  • To successfully discover the load balancer pool members, navigate to the System Property [sys_properties] table, and set the sys_db_bigpipe.displayservicenames system property to false.
  • Use basic authentication credentials for discovery via REST.
  • For horizontal discovery using Discovery, provide permissions to run the following APIs:
    • https://" get_attr {"managementIP"}"/mgmt/tm/sys/global-settings
    • https://" get_attr {"managementIP"}"/mgmt/tm/sys/hardware
    • https://"get_attr {"managementIP"}"/mgmt/tm/sys/failover
    • https://"get_attr {"managementIP"}"/mgmt/tm/cloud/net/self
    • https://"get_attr {"managementIP"}"/mgmt/tm/net/interface
    • https://"get_attr {"managementIP"}"/mgmt/tm/net/self
    • https://"get_attr {"managementIP"}"/mgmt/tm/net/vlan
    • https://"get_attr {"managementIP"}"/mgmt/tm/ltm/pool
    • https://"get_attr {"managementIP"}"/mgmt/tm/gtm/wideip
    • https://"get_attr {"managementIP"}"/mgmt/tm/cm/traffic-group/
    • https://"get_attr {"managementIP"}"/mgmt/tm/cm/device
    For top-down discovery using Service Mapping, provide permissions to run the following APIs:
    • https://" get_attr {"managementIP"}"/mgmt/tm/ltm/"get_attr {"irule"}
    • https://" get_attr {"managementIP"}"/mgmt/tm/ltm/virtual/~Common~"get_attr {"vip_name"}
    • https://" get_attr {"computer_system.managementIP"}"/mgmt/tm/ltm/pool/"get_attr {"pool_name"}"/members?
  • (Optional) For top-down discovery with Service Mapping, configure applicative credentials.
  • (Optional) For top-down discovery with Service Mapping, provide a user with permissions to run the following commands:
    • bigpipe commands (for BIG-IP LTM F5 or BIG-IP GTM F5 version 9)
    • bigpipe and Traffic Management Shell (TMSH) commands (for BIG-IP LTM F5 or BIG-IP GTM F5 version 10)
    • Traffic Management Shell (TMSH) commands (for BIG-IP LTM F5 or BIG-IP GTM F5 version 11)
    • Traffic Management Shell (TMSH) advanced commands (for BIG-IP LTM F5 or BIG-IP GTM F5 version 10, 11, and 12)
    • The show cm traffic-group – get command for discovering F5 BIG-IP Device Service Clustering
  • (Optional) For top-down discovery with Service Mapping, give the user elevated rights to be able to run Service Mapping commands requiring a privileged user.
BMC CTRL-M Enterprise Manager Control-M [cmdb_ci_appl_controlm] Give the user elevated rights to be able to run Service Mapping commands requiring a privileged user.
(If hosted on a Windows server) On the Now Platform, configure a domain user for accessing the Windows OS as described in Windows credentials.
(If hosted on a Linux or UNIX server) (Optional) on the Now Platform, configure SSH credentials.
BMC CTRL-M Gateway Control-M [cmdb_ci_appl_controlm] Give the user elevated rights to be able to run Service Mapping commands requiring a privileged user.
(If hosted on a Windows server) On the Now Platform, configure a domain user for accessing the Windows OS as described in Windows credentials.
(If hosted on a Linux or UNIX server) (Optional) on the Now Platform, configure cc.
BMC IT Asset Management (ITAM) ITAM Asset Center [cmdb_ci_appl_itam] On the Now Platform, configure a Windows OS user with permissions to access the ITAM registry as described in Windows credentials.
CA Identity Manager Provisioning Server CA Identity Manager Provisioning Server [cmdb_ci_appl_ca_id_man] On the Now Platform, configure Windows credentials.
(Optional) For discovering using the WinRM protocol, see Configure WinRM trusted hosts on MID Server.
Cadebill Interconnect inter connect [cmdb_ci_inter_connect] On the Now Platform, configure Windows credentials.
Cadebill Interconnect Instance Interconnect Instance [cmdb_ci_interconnect_instance] On the Now Platform, configure Windows credentials.
Cisco Application Control Engine ACE (on Cisco CSM) ACE [cmdb_ci_lb_ace] On the Now Platform, configure applicative credentials.
On the Now Platform, configure SSH credentials.
On the Now Platform, configure SNMP community credentials as described in SNMP credentials.
Cisco CallManager Cisco CallManager [cmdb_ci_appl_cisco_call_man] (If hosted on a Linux or UNIX server) (Optional) on the Now Platform, configure SSH credentials.
(If hosted on a Windows server) On the Now Platform, configure a domain user for accessing the Windows OS as described in Windows credentials.
Cisco Global Site Selector (GSS) Load Balancer Service [cmdb_ci_lb_service] Configure SNMP community credentials as described in SNMP credentials.
On the Now Platform, configure SSH credentials.
Provide a user who has permissions to run query on the domain list, DNS rule output, and VIP answer to get the outgoing connections of GSS.
Citrix Delivery Controller Delivery Controller [cmdb_ci_appl_delivery_controler]
  • Configure Windows administrative credentials to access the host machine.
  • Make sure that PowerShell for Discovery is installed on your MID Servers. The patterns used for Citrix discovery require the ability to run PowerShell commands.
  • For OS users, make sure you can execute “Get-XDSite.” The Citrix Studio Admin should provide permissions.
  • (Optional) For top-down discovery with Service Mapping, on Citrix Delivery Controller, install the Citrix.Broker module.
  • (Optional) For top-down discovery with Service Mapping, a user with permission to run PowerShell commands.
  • (Optional) (Optional) For discovering using the WinRM protocol, see Configure WinRM trusted hosts on MID Server.
Citrix Usage Collector Citrix Collector [cmdb_ci_appl_citrix_collector]
  • Configure applicative credentials.
  • Configure a user with permissions to run PowerShell commands on the Citrix server.
  • (If hosted on a Windows server) On the Now Platform, configure a domain user for accessing the Windows OS as described in Windows credentials.
    Note: To use this credential later for XenAPP, set the Credential alias attribute to cmdb_ci_appl_citrix_xenapp. To use this credential later for Citrix, set the Credential alias attribute to cmdb_ci_appl_citrix_collector.
  • To discover Epic, provide permission to run afarm command.
  • Provide a user with permissions to read and query the Citrix repository:
    • For versions 4.5 and later, a PowerShell script from the XenApp server.
    • For versions earlier than 4.5, a Microsoft Visual Basic Script (VBScript) from the Citrix Presentation Server
  • (If hosted on a Unix server) On the Now Platform, configure SSH credentials.
    Note: To use this credential later for XenAPP, set the Credential alias attribute to cmdb_ci_appl_citrix_xenapp. To use this credential later for Citrix, set the Credential alias attribute to cmdb_ci_appl_citrix_collector.
Citrix Presentation Server/Citrix XenApp
Note: Citrix XenApp is the new name for Presentation Server beginning with the XenApp 5 release.
 Citrix XenAPP or Presentation Server [cmdb_ci_appl_citrix_xenapp]
Citrix Netscaler Citrix Netscaler [cmdb_ci_lb_netscaler]
  • Configure SNMP credentials.
    Note: You also have the option of using SSH credentials. However, if the payload size of the data that is returned to the instance is large, the discovery process can fail. In this case, use SNMP credentials instead.
  • (Optional) Provide a user with the read access to the NS.conf configuration file if you do not want to provide SNMP or SSH credentials.
  • Use basic authentication credentials for discovery via REST.

Service Mapping uses the SSH credentials to retrieve connections that are not from CMDB. Discovering connections using the SSH protocol is a failover mechanism for the SNMP-based discovery.
Citrix Netscaler Global Server Load Balancer Load Balancer Service [cmdb_ci_lb_service]
  • Configure SNMP credentials.
    Note: You also have the option of using SSH credentials. However, if the payload size of the data that is returned to the instance is large, the discovery process can fail. In this case, use SNMP credentials instead.
  • (Optional) Provide a user with the read access to the NS.conf configuration file if you do not want to provide SNMP or SSH credentials.
  • Use basic authentication credentials for discovery via REST.
Connect APK Connect-It Service [cmdb_ci_appl_connectit] (If hosted on a Windows server) On the Now Platform, configure a domain user for accessing the Windows OS as described in Windows credentials.
(If hosted on a Linux or Unix server) on the Now Platform, configure SSH credentials.
(Optional) For discovering using the WinRM protocol, see Configure WinRM trusted hosts on MID Server.
EMC Documentum Documentum DocBase [cmdb_ci_appl_doc_docbroker] (If hosted on a Windows server) On the Now Platform, configure Windows credentials.
(If hosted on a Linux or Unix server) (Optional) on the Now Platform, configure SSH credentials.
Epic

epicd app server [cmdb_ci_epicd_app_server]

epic agent [cmdb_ci_epic_agent]

epic cache [cmdb_ci_epic_cache]

epicd [cmdb_ci_endpoint_epicd]

 (If hosted on a Windows server) On the Now Platform, configure Windows credentials.
(If hosted on a Linux or Unix server) (Optional) on the Now Platform, configure SSH credentials.
FormEngine Oracle Forms Engine [cmdb_ci_appl_ora_forms] Give the user elevated rights to be able to run Service Mapping commands requiring a privileged user.
(If hosted on a Windows server) On the Now Platform, configure Windows credentials.
(If hosted on Unix server) on the Now Platform, configure SSH credentials.
Google Cloud Platform Cloud Service Account [cmdb_ci_cloud_service_account]
  • Provide a read-only user with permission to use the following API elements.
  • On the Now Platform, configure Google API credentials.
HAProxy HAProxy Load Balancer [cmdb_ci_lb_haproxy] (If hosted on a Windows server) On the Now Platform, configure Windows credentials.
(If hosted on a Linux or Unix server) (Optional) on the Now Platform, configure SSH credentials.
HP Operations Manager HP Operations Manager [cmdb_ci_appl_hp_operations] (If hosted on a Windows server) On the Now Platform, configure Windows credentials.
(If hosted on a Unix server) On the Now Platform, configure SSH credentials.
HP Service Manager Application Server HP Service Manager [cmdb_ci_appl_hp_service] (If hosted on a Windows server) On the Now Platform, configure Windows credentials.
(If hosted on a Linux or Unix server) (Optional) on the Now Platform, configure SSH credentials.
(Optional) For discovering using the WinRM protocol, see Configure WinRM trusted hosts on MID Server.
HP Service Manager Index HP SM Index Server [cmdb_ci_appl_hp_index] (If hosted on a Windows server) On the Now Platform, configure Windows credentials.
(If hosted on a Linux or Unix server) On the Now Platform, configure SSH credentials.
HP Service Manager Knowledge Base HP SM KnowledgeBase [cmdb_ci_appl_hp_sm_kb] (If hosted on a Windows server) On the Now Platform, configure Windows credentials.
(If hosted on a Unix server) On the Now Platform, configure SSH credentials.
HP Quality Center HP Quality Center [cmdb_ci_appl_hp_qc] On the Now Platform, configure Windows credentials.
HP UCMDB HP uCMDB [cmdb_ci_app_server_hp_ucmdb] On the Now Platform, configure Windows credentials.
IBM Cloud Platform Cloud Service Account [cmdb_ci_cloud_service_account] On the Now Platform, configure the IBM Credentials for accessing the IBM account.
IBM WebSphere Message Broker IBM WebSphere Message Broker [cmdb_ci_appl_ibm_wmb] (If hosted on a Windows server) On the Now Platform, configure Windows credentials.
(If hosted on Unix server) On the Now Platform, configure SSH credentials for a user with permissions to run the following commands:
  • "source " + $directory + "/mqsiprofile”
  • "echo $MQSI_VERSION “
  • $directory + "/mqsireportbroker " + $name
  • $directory + "/mqsibrowse " + $name + " -t BROKERRESOURCES “
Set the Credential alias attribute to [cmdb_ci_appl_ibm_wmb]. Configuring this attribute allows you later to use the credential for this CI in patterns.
IBM CTRL-M Server Control-M [cmdb_ci_appl_controlm] (If hosted on Unix) Give the user elevated rights to be able to run Service Mapping commands requiring a privileged user.
(If hosted on Windows), on the Now Platform, configure Windows credentials.
IBM CICS Transaction Gateway CTG IBM CTG [cmdb_ci_appl_ibm_ctg] Give the user elevated rights to be able to run Service Mapping commands requiring a privileged user.
(Optional) For discovering using the WinRM protocol, see Configure WinRM trusted hosts on MID Server.
IBM Customer Information Control System (CICS) IBM CICS [cmdb_ci_appl_ibm_cics] (If hosted on Unix) Give the user elevated rights to be able to run Service Mapping commands requiring a privileged user.
(Optional) For discovering using the WinRM protocol, see Configure WinRM trusted hosts on MID Server.
IBM DB2 DB2 Instance [cmdb_ci_db_db2_instance]
Note: Starting with CMDB CI Class Models version 1.67.0, the label has been renamed to DB2 Subsystem.
  • (If hosted on Linux) Give the user elevated rights to be able to run Service Mapping commands requiring a privileged user.
  • (If hosted on Windows), on the Now Platform, configure Windows credentials.

    Set the tag attribute to [cmdb_ci_db_db2_instance]. Configuring this attribute allows you later to use the credential for this CI in patterns.

    (Optional) To discover connections to IBM DB2, configure SSH credentials for a user with permissions to run the following commands:
    • db2 list tablespaces
    • "db2cmd /c /w /i db2 -tvf "+$ script_name
  • (If hosted on z/OS) Provide the user with the following permissions:
    • To write into the /tmp directory.
    • To see all user processes.
    • To run REXX scripts.
    • To read into the db2 folder.
  • (If hosted on z/OS) On the Now Platform, configure SSH credentials.
IBM J2EE EAR [cmdb_ci_app_server_ws_ear] (If hosted on Linux only) Give the user elevated rights to be able to run Service Mapping commands requiring a privileged user.
(If hosted on Linux) On the Now Platform, configure SSH credentials.
(If hosted on Windows), on the Now Platform, configure Windows credentials.
IBM PowerHA Cluster (HACMP) discovery
  • Cluster Resource Group [cmdb_ci_cluster_resource_group]
  • UNIX Cluster Resource [cmdb_ci_unix_cluster_resource]
  • UNIX Cluster Node [cmdb_ci_unix_cluster_node]
  • AIX Server [cmdb_ci_aix_server]
  • UNIX Cluster [cmdb_ci_unix_cluster]
  • Cluster Virtual IP [cmdb_ci_cluster_vip]
 Configure a UNIX user with permissions to run all commands defined in the official IBM documentation.
IBM Tivoli Access Manager WebSEAL or IBM Security Access Manager (ISAM) appliance Webseal [cmdb_ci_app_server_webseal] (For ISAM appliance only) Configure applicative credentials for the user with permissions to run the following REST commands:
  • /reverseproxy – for retrieving data about the reverse proxy and instances.
  • /wga/reverseproxy/"+${junctionstable[].instance}+"/junctions – for getting junctions per each instance.
  • /wga/reverseproxy/" + $instance_name + "/junctions?junctions_id=" + $junction_name – for getting forwarding URLs for the entry point junction.
(For ISAM appliance only) Ensure that the system can use the cURL commands for discovery:
  • On the MID Server used for ISAM appliance discovery, define the PATH variable to contain the cURL package installation for the relevant MID Server users.
  • Configure permissions to run the curl.exe file for the relevant MID Server user.
(If hosted on Linux) On the Now Platform, configure SSH credentials.
(If hosted on Windows), on the Now Platform, configure Windows credentials.
(Optional) For discovering using the WinRM protocol, see Configure WinRM trusted hosts on MID Server.
IBM Virtualization and Hardware Management Console (HMC)
  • HMC server
  • IBM frame
  • Logical partition (LPAR) instance

    An LPAR is virtual machine equivalent of IBM.

  • LPAR resource
  • Verify that the following applications are up to date:
    • Discovery and Service Mapping Patterns
    • CMDB CI Class Models
  • Verify you have permissions for the following HMC commands:
    • lssyscfg
    • lshmc
    • lshwres
  • Verify you have permissions for the following AIX (LPAR) command: lparstat -i.
    Note: The lparstat -i command is in addition to the commands required for AIX server discovery. For more information on AIX server discovery, see AIX server discovery. For a list of the AIX commands, see Service Mapping commands requiring a privileged user.
  • Configure SSH credentials on the Now Platform. For more information, see SSH credentials.
IBM WebSphere Application Server IBM Websphere [cmdb_ci_app_server_websphere] (If hosted on Unix only) Give the user elevated rights to be able to run Service Mapping commands requiring a privileged user.
(If hosted on Linux) On the Now Platform, configure SSH credentials.
(If hosted on Windows), on the Now Platform, configure Windows credentials.
(If hosted on z/OS) On the Now Platform, configure SSH credentials.
(If hosted on z/OS) Provide the user with the following permissions:
  • To write into the /tmp directory.
  • To see all user processes.
  • To run REXX scripts.
  • To run commands using oeconsol.
  • To run the command that brings info on the WebSphere Application Server task: "oeconsol 'D OMVS,A=ALL' | grep "+$taskname.
  • To read content of the WAS installation folder and the permission to read was.env.file where the installation variables are situated.
(Optional) For discovering using the WinRM protocol, see Configure WinRM trusted hosts on MID Server.
IBM WebSphere DataPower Data Power [cmdb_ci_app_server_datapower]
SNMP credentials
SNMP credentials are necessary for using the following SNMP queries:
  • For horizontal discovery of the Data Power Hosting Server [cmdb_ci_datapower_server]:
    • 1.3.6.1.2.1.1.1
    • 1.3.6.1.2.1.1.5
    • 1.3.6.1.2.1.4.20.1
    • 1.3.6.1.2.1.2.2.1
    • 1.3.6.1.4.1.14685.3.1.196.1
    • 1.3.6.1.4.1.14685.3.1.11.1
    • 1.3.6.1.4.1.14685.3.1.112.1
  • For top-down discovery of the Data Power [cmdb_ci_datapower_server]:
    • 1.3.6.1.2.1.1.1
    • 1.3.6.1.2.1.1.5
    • 1.3.6.1.4.1.14685.3.1.11.1
Applicative credentials
Together with SNMP credentials, applicative credentials are required to discover DataPower application domains, otherwise known as logical CIs.

In addition, SNMP and applicative credentials are used for top-down discovery of applicative relationships (corresponding application DataPower domain).

User with permissions to run SOAP
Permissions to run SOAP queries are necessary for top-down discovery of the DataPower Web Service and MQ connection.
IBM WebSphere Message Broker Flow WMB Flow [cmdb_ci_appl_wmb] (If hosted on a Unix server) Give the user elevated rights to be able to run Service Mapping commands requiring a privileged user.
Provide an IBM WebSphere Message Broker OS user with permissions to run the WebSphere Message Broker service.
(If hosted on Windows), on the Now Platform, configure Windows credentials.
(If hosted on a Unix server) On the Now Platform, configure SSH credentials for a user with permissions to run the following commands:
  • "source " + $directory + "/mqsiprofile”
  • "echo $MQSI_VERSION “
  • $directory + "/mqsireportbroker " + $name
  • $directory + "/mqsibrowse " + $name + " -t BROKERRESOURCES “
Set the Credential alias attribute to [cmdb_ci_appl_ibm_wmb]. Configuring this attribute allows you later to use the credential for this CI in patterns.
IBM WebSphere Message Broker IBM WebSphere Message Broker [cmdb_ci_appl_ibm_wmb] (If hosted on Unix) Give the user elevated rights to be able to run Service Mapping commands requiring a privileged user.
(If hosted on a Unix server) On the Now Platform, configure SSH credentials. Set the Credential alias attribute to [cmdb_ci_appl_ibm_wmb]. Configuring this attribute allows you later to use the credential for this CI in patterns.
(If hosted on a Windows server) On the Now Platform, configure Windows credentials.
Provide an IBM WebSphere Message Broker OS user with permissions to run the WebSphere Message Broker service.
IBM MQ (formerly IBM WebSphere MQ) IBM MQ Manager (formerly IBM WebSphere MQ) [cmdb_ci_appl_ibm_wmq] (If hosted on Unix) Give the user elevated rights to be able to run Service Mapping commands requiring a privileged user.
Configure applicative credentials for a user with permissions to run the following commands:
  • (If hosted on a Windows server) "echo display QMSTATUS ALL | runmqsc -e " + $queue_manager – for getting the queue manager (QM) status.
  • (If hosted on a Windows server) "echo display QMGR ALL | runmqsc -e " + $queue_manager – for getting the complete information about QM.
  • (If hosted on a Unix server) "echo \" display QMSTATUS ALL \" | runmqsc " + $queue_manager – for getting the QM status.
  • (If hosted on a Unix server) "echo \" display QMGR ALL \" | runmqsc " + $queue_manager – for getting the complete information about QM.
  • (If hosted on a Unix server) "echo \" display queue(" + $entry_point.queue + ") \" | runmqsc " + $queue_manager – for getting the information about the EP queue.
(If hosted on Windows), on the Now Platform, configure Windows credentials.
(If hosted on a Unix server) configure SSH credentials.

While configuring OS credentials, set the Credential alias attribute to cmdb_ci_appl_ibm_wmq. Configuring this attribute allows you later to use the credential for this CI in patterns.

(Optional) To find IBM MQ connections, configure SSH credentials for a user with permissions to run the following commands:
  • "echo \" display queue("+$entry_point.queue+") \" | runmqsc "+$queue_manager
  • "echo \" display QMSTATUS ALL \" | runmqsc "+$queue_manager
  • echo \" display QMGR ALL \" | runmqsc "+$queue_manager
(If hosted on z/OS) On the Now Platform, configure SSH credentials.
(If hosted on z/OS) Provide the user with the following permissions:
  • To write into the /tmp directory.
  • To see all user processes.
  • To run REXX scripts.
  • To run commands using oeconsol.
  • To run MQ commands.
IBM MQ Queue (formerly IBM WebSphere MQ Queue) IBM MQ Queue (formerly IBM WebSphere MQ Queue) [cmdb_ci_appl_ibm_wmq_queue] (If hosted on a Unix server) Give the user elevated rights to be able to run Service Mapping commands requiring a privileged user.
Configure applicative credentials for a user with permissions to run the following commands:
  • dspmq – for getting information about the queue manager.
  • "echo \" display queue(" + $entry_point.queue + ") \" | runmqsc " + $queue_manager – for getting the queue information.
  • "echo \" display clusqmgr(*) conname \" | runmqsc " + $queue_manager – for getting all cluster queue manager (QM) lines.
  • "echo \" display qstatus(" + $entry_point.queue + ") TYPE(HANDLE) OPENTYPE(INPUT) CONNAME PID \" | runmqsc " + $queue_manager – for getting the queue status information.
(If hosted on Unix server) on the Now Platform, configure SSH credentials for a user with permissions to run the following commands:
  • dspmq

    echo \" display queue("+$entry_point.queue+") \" | runmqsc "+$queue_manager

  • (Optional) "echo \" display qcluster("+$rqmname+") \" | runmqsc "+$queue_manager
  • (Optional) "echo \" dischl(*) CHLTYPE(SDR) CONNAME XMITQ WHERE(XMITQ EQ "+$xmit_name+")\" | runmqsc "+$queue_manager
  • (Optional) "echo \" display clusqmgr(*) conname \" | runmqsc "+$queue_manager
  • (Optional) "echo \" display qstatus("+$entry_point.queue+") TYPE(HANDLE) OPENTYPE(INPUT) CONNAME PID \" | runmqsc "+$queue_manager
While configuring OS credentials, set the Credential alias attribute to cmdb_ci_appl_ibm_wmq. Configuring this attribute allows you later to use the credential for this CI in patterns.
(If hosted on Windows), on the Now Platform, configure Windows credentials for a user with permissions to run the following commands:
  • dspmq

    echo \" display queue("+$entry_point.queue+") \" | runmqsc "+$queue_manager

  • (Optional) "echo \" display qcluster("+$rqmname+") \" | runmqsc "+$queue_manager
  • (Optional) "echo \" dischl(*) CHLTYPE(SDR) CONNAME XMITQ WHERE(XMITQ EQ "+$xmit_name+")\" | runmqsc "+$queue_manager
  • (Optional) "echo \" display clusqmgr(*) conname \" | runmqsc "+$queue_manager
  • (Optional) "echo \" display qstatus("+$entry_point.queue+") TYPE(HANDLE) OPENTYPE(INPUT) CONNAME PID \" | runmqsc "+$queue_manager
While configuring OS credentials, set the Credential alias attribute to cmdb_ci_appl_ibm_wmq. Configuring this attribute allows you later to use the credential for this CI in patterns..
(Optional) For discovering using the WinRM protocol, see Configure WinRM trusted hosts on MID Server.
IBM WebSphere Portal Websphere Portal [cmdb_ci_appl_websphere_portal] (If hosted on Linux only) Give the user elevated rights to be able to run Service Mapping commands requiring a privileged user.
(If hosted on Linux) On the Now Platform, configure SSH credentials.
(If hosted on a Windows server) On the Now Platform, configure Windows credentials.
(Optional) For discovering using the WinRM protocol, see Configure WinRM trusted hosts on MID Server.
Interconnect Web Service Inter connect [cmdb_ci_inter_connect] (If hosted on a Unix server) On the Now Platform, configure SSH credentials.
(If hosted on a Windows server) On the Now Platform, configure Windows credentials.
Jboss JBoss [cmdb_ci_app_server_jboss] Give the user elevated rights to be able to run Service Mapping commands requiring a privileged user.
(If hosted on a Windows server) On the Now Platform, configure Windows credentials.
(If hosted on Unix server) on the Now Platform, configure SSH credentials.
(Optional) For discovering using the WinRM protocol, see Configure WinRM trusted hosts on MID Server.
Jboss Module Jboss module [cmdb_ci_app_server_jb_module] (If hosted on a Unix server) Give the user elevated rights to be able to run Service Mapping commands requiring a privileged user.
(If hosted on Linux) On the Now Platform, configure SSH credentials.
(If hosted on a Windows server) On the Now Platform, configure Windows credentials.
JRun Jrun [cmdb_ci_app_server_jrun] (If hosted on Unix only) Give the user elevated rights to be able to run Service Mapping commands requiring a privileged user.
(If hosted on Linux) On the Now Platform, configure SSH credentials.
(If hosted on a Windows server) On the Now Platform, configure Windows credentials.
(Optional) For discovering using the WinRM protocol, see Configure WinRM trusted hosts on MID Server.
JRun WAR Inc Jrun WAR [cmdb_ci_app_server_jrun_war] (If hosted on Unix only) Give the user elevated rights to be able to run Service Mapping commands requiring a privileged user.
(If hosted on Linux) On the Now Platform, configure SSH credentials.
(If hosted on a Windows server) On the Now Platform, configure Windows credentials.
Microsoft Azure Web Sites Cloud WebServer [cmdb_ci_cloud_webserver] On the Now Platform, add an Azure service principal and set up a cloud account for Azure. Set the account Id to the Azure Service Principal as it appears at the Microsoft Azure Console.
Microsoft Azure Load Balancer Load Balancer Service [cmdb_ci_lb_service] On the Now Platform, configure add an Azure service principal and set up a cloud account for Azure. Set the account Id to the Azure Service Principal as it appears at the Microsoft Azure Console.
Microsoft Azure SQL Database Cloud Database Rule [cmdb_ci_cloud_database] On the Now Platform, add an Azure service principal and set up a cloud account for Azure. Set the account Id to the Azure Service Principal as it appears at the Microsoft Azure Console.
Microsoft Dynamic CRM Dynamic CRM Component [cmdb_ci_appl_ms_dynamic_crm] On the Now Platform, configure a domain user for accessing the Windows OS as described in Windows credentials.
(Optional) For discovering using the WinRM protocol, see Configure WinRM trusted hosts on MID Server.
Microsoft BizTalk Orchestration BizTalk Orchestration [cmdb_ci_appl_biztalk_orch] On the Now Platform, configure a domain user for accessing the Windows OS as described in Windows credentials.
(Optional) For discovering using the WinRM protocol, see Configure WinRM trusted hosts on MID Server.
Microsoft BizTalk Server BizTalk [cmdb_ci_appl_biztalk] On the Now Platform, configure a domain user for accessing the Windows OS as described in Windows credentials.
Microsoft Exchange BackEnd Server ExchangeBackEndServer [cmdb_ci_exchange_backend] On the Now Platform, configure Windows credentials.
Configure credentials required for host discovery for a Windows server.
(Optional) For discovering using the WinRM protocol, see Configure WinRM trusted hosts on MID Server.
Microsoft Exchange FrontEnd Server ExchangeFrontEndServer [cmdb_ci_exchange_frontend] On the Now Platform, configure Windows credentials.
Configure credentials required for host discovery for a Windows server.
(Optional) For discovering using the WinRM protocol, see Configure WinRM trusted hosts on MID Server.
Microsoft FAST Search Server Fast Search [cmdb_ci_appl_fastsearch] Create a user with the permission to read the following files:
  • install_directory+"\etc\VERSION.xml
  • and install_directory+"\etc\CSConfig.xml
(Optional) For discovering using the WinRM protocol, see Configure WinRM trusted hosts on MID Server.
Microsoft Exchange Hub Transport Server

Microsoft Exchange Mailbox

Microsoft Exchange CAS

 ExchangeHub [cmdb_ci_exchange_hub]

Exchange MailBox [cmdb_ci_exchange_mailbox]

Exchange Client Access Server [cmdb_ci_exchange_cas]
  • On the Now Platform, configure a domain user for accessing the Windows OS as described in Windows credentials. Use the Microsoft Exchange Server administrator's user name and password as Windows credentials. For example, user name: local\administrator and password: Are1300.
    Note: If you configure Windows credentials for a user different from the Microsoft Exchange Server administrator, Service Mapping uses traffic-based discovery that results in mapping all Microsoft Exchange clients.
  • (For Exchange CAS 2010 and 2013, 2016) On the Now Platform, configure applicative credentials, setting the CI type to Exchange Mailbox.
    Warning: Do not confuse the Exchange Mailbox CI type with the Exchange Mailbox Server CI type.
    Service Mapping uses these applicative credentials to access the of/Servers/Servers.slab folder on the Key Exchange Admin Center (EAC). Service Mapping also uses the applicative credentials to run the following PowerShell commands against the MID Servers:
    • Get-ExchangeServer
    • Get-ExchangeServer
    • Get-MailboxServer
    • Get-ClusteredMailBoxServerStatus
    • Get-ExchangeServer
    • Get-StorageGroup
    • Get-MailboxDatabase
  • (For Microsoft Exchange CAS 2010 and 2016) On the Windows Server hosting Microsoft Exchange CAS, install the Microsoft.Exchange.Management.PowerShell.E2010 module.
  • (For Microsoft Exchange CAS 2007) On the Windows Server hosting Microsoft Exchange CAS, install the Microsoft.Exchange.Management.PowerShell.Admin module.
  • (For Microsoft Exchange CAS 2007, 2010) On the Now Platform, upload the rctrlx tool for running PowerShell commands as described in Upload the rctrlx.exe file to MID Servers.
  • (For Microsoft Exchange CAS 2007 and 2010) Provide an Exchange Mailbox OS user with the rights to run Exchange services on Windows and has permission to query Exchange repository:

    On the Now Platform, configure Windows credentials setting the Credential alias attribute to [cmdb_ci_exchange_mailbox]. Configuring this attribute allows you later to use the credential for this CI in patterns.

  • (Optional) For discovering using the WinRM protocol, see Configure WinRM trusted hosts on MID Server.
  • Verify that you know the entry point necessary for discovering the Microsoft Exchange Server. Use the URL for the Outlook web access in the following format:

    http(s)://<hostname>:<port>/owa

    For example, http(s)://myhost:<443>/owa
Microsoft Identity Integration Server IIFP [cmdb_ci_directory_iifp] On the Now Platform, configure Windows credentials.
Microsoft Internet Information Services (IIS) Microsoft iis Web Server [cmdb_ci_microsoft_iis_web_server] On the Now Platform, configure Windows credentials.
(Optional) For discovering using the WinRM protocol, see Configure WinRM trusted hosts on MID Server.
Microsoft Internet Information Services (IIS) Virtual Directory IIS Virtual Directory [cmdb_ci_iisdirectory] On the Now Platform, configure the following credentials:
Verify read access to the following files:
  • web.config: Possible locations $entry_point.path + "Web.config" or $entry_point.path + "\Web.config"
  • machine.config: possible location "dir \"C:\Windows\Microsoft.NET\"
  • (Optional) To find ADO.NET connections, set the Credential alias attribute to [cmdb_ci_iisdirectory]. Configuring this attribute allows you later to use the credential for this CI in patterns.
  • (Optional) For discovering using the WinRM protocol, see Configure WinRM trusted hosts on MID Server.
Microsoft Message Queuing (MSMQ) MSMQ [cmdb_ci_appl_msmq] On the Now Platform, configure Windows credentials.
Microsoft .NET Framework .NET Application [cmdb_ci_appl_dot_net] On the Now Platform, configure Windows credentials.

(Optional) To find ADO.NET connections, set the Credential alias attribute to [cmdb_ci_iisdirectory]. Configuring this attribute allows you later to use the credential for this CI in patterns.
Provide an IIS Virtual Directory OS user with the rights to run the IIS service on Windows.
Configure applicative credentials.
(Optional) For discovering using the WinRM protocol, see Configure WinRM trusted hosts on MID Server.
Microsoft SharePoint SharePoint [cmdb_ci_appl_sharepoint] On the Now Platform, configure the following credentials:
  • Windows credentials
  • Set the Credential alias attribute to [cmdb_ci_appl_sharepoint]. Configuring this attribute allows you later to use the credential for this CI in patterns.
  • Configure WMI Query access to the remote Sharepoint server.
  • (Optional) To find Windows SharePoint connections, configure Windows credentials for a user with permissions to run http get request to the SharePoint Central Administration URL.
Provide a SharePoint OS user with permissions:
  • To run SharePoint services on Windows
  • To log into the SharePoint Admin page
To use two separate credentials with different permissions, configure credentials as covered in Prerequisites for performing top-down discovery / Service Mapping discovery to Sharepoint system [KB0813083] article in the Now Support Knowledge Base.
Microsoft SQL Database MySQLClusterDataNode [cmdb_ci_db_mysql_clusternode] Provide the following user or users:
  • For discovering Microsoft Biztalk using SQL queries, provide a user and credentials for Microsoft BizTalk.
  • For discovering licensing information on Microsoft SQL Server, provide a user and credentials for accessing Microsoft SQL Database.

Refer to the product documentation for operational information.
Credentials for host discovery as described in Windows credentials.
Configure applicative credentials.
MongoDB Mongo Config Server [cmdb_ci_appl_mongo_config_serv] (If hosted on a Windows server) On the Now Platform, configure Windows credentials.
(If hosted on a Unix server) On the Now Platform, configure SSH credentials.
Provide a user with permissions to run Mongo commands described in Service Mapping commands not requiring a privileged user.
MySQL Cluster MGM Node MySQLClusterMGMNode [cmdb_ci_db_mysql_clustermgnode] (If hosted on Unix only) Give the user elevated rights to be able to run Service Mapping commands requiring a privileged user.
On the Now Platform, configure Windows credentials.
Nginx Nginx Web Server [cmdb_ci_nginx_web_server] (If hosted on Unix only) Give the user elevated rights to be able to run Service Mapping commands requiring a privileged user.
Configure applicative credentials.
(If hosted on a Windows server) On the Now Platform, configure Windows credentials.
(Optional) For discovering using the WinRM protocol, see Configure WinRM trusted hosts on MID Server.
OpenText Documentum Documentum DocBase [cmdb_ci_appl_doc_docbase] (If hosted on a Windows server) On the Now Platform, configure Windows credentials.
(If hosted on a Unix server) On the Now Platform, configure SSH credentials.
Oracle Application Server Oracle iAS [cmdb_ci_app_server_ora_ias] (If hosted on a Windows server) On the Now Platform, configure Windows credentials.
(If hosted on a Unix server) On the Now Platform, configure SSH credentials.
(If hosted on Unix) Configure applicative credentials.
Oracle Advanced Queue Queue Advanced Queue Queue [cmdb_ci_appl_ora_queue] (If hosted on Unix) Configure applicative credentials for Service Mapping.
(If hosted on a Windows server) On the Now Platform, configure Windows credentials.
(If hosted on Linux) On the Now Platform, configure SSH credentials.
Oracle Clusterware UNIX Cluster [cmdb_ci_unix_cluster], UNIX Cluster Node [cmdb_ci_unix_cluster_node], UNIX Cluster Resource [cmdb_ci_unix_cluster_resource], Cluster Virtual IPs [cmdb_ci_cluster_vip] See Oracle database discovery.
Oracle Concurrent Server Oracle Concurrent Server [cmdb_ci_appl_ora_conc] (If hosted on Unix only) Give the user elevated rights to be able to run Service Mapping commands requiring a privileged user.
(If hosted on a Windows server) On the Now Platform, configure Windows credentials.
(If hosted on Linux) On the Now Platform, configure SSH credentials.
(Optional) For discovering using the WinRM protocol, see Configure WinRM trusted hosts on MID Server.
Oracle Database Oracle Instance [cmdb_ci_db_ora_instance] (If hosted on Unix only) Give the user elevated rights to be able to run Service Mapping commands requiring a privileged user.
(If hosted on a Windows server) On the Now Platform, configure a domain user for accessing the Windows OS as described in Windows credentials.
(If hosted on Linux) On the Now Platform, configure SSH credentials.
(If hosted on Unix) Configure applicative credentials.
(Optional) For discovering using the WinRM protocol, see Configure WinRM trusted hosts on MID Server.
Oracle Database 12c Oracle PDB Instance [cmdb_ci_db_ora_pdb_instance]
Oracle Database Advanced Queuing Advanced Queue Queue [cmdb_ci_appl_ora_queue] (If hosted on a Windows server) On the Now Platform, configure Windows credentials.
(If hosted on a Unix server) On the Now Platform, configure SSH credentials.
Provide an Oracle instance user with permission to run the sqlplus command as described in Service Mapping commands not requiring a privileged user.
Oracle Discoverer Engine Oracle Discoverer Engine [cmdb_ci_appl_ora_disc] (If hosted on Unix only) Give the user elevated rights to be able to run Service Mapping commands requiring a privileged user.
(If hosted on Unix) Configure applicative credentials.
(If hosted on a Windows server) On the Now Platform, configure a domain user for accessing the Windows OS as described in Windows credentials.
(If hosted on Linux) On the Now Platform, configure SSH credentials.
(Optional) For discovering using the WinRM protocol, see Configure WinRM trusted hosts on MID Server.
Oracle Discoverer UI Oracle Discoverer UI [cmdb_ci_appl_ora_disc_ui] (If hosted on Unix) Configure applicative credentials for Service Mapping.
On the Now Platform, configure a domain user for accessing the Windows OS as described in Windows credentials.
(If hosted on Linux) On the Now Platform, configure SSH credentials.
(If hosted on Unix only) Give the user elevated rights to be able to run Service Mapping commands requiring a privileged user.
(Optional) For discovering using the WinRM protocol, see Configure WinRM trusted hosts on MID Server.
Oracle E-Business Suite Oracle ESB [cmdb_ci_appl_ora_ebs] (If hosted on Unix) Configure applicative credentials.
On the Now Platform, configure a domain user for accessing the Windows OS as described in Windows credentials.
(If hosted on Linux) On the Now Platform, configure SSH credentials.
(Optional) For discovering using the WinRM protocol, see Configure WinRM trusted hosts on MID Server.
Oracle Form UI Oracle Forms UI [cmdb_ci_appl_ora_forms_ui] (If hosted on a Windows server) On the Now Platform, configure a domain user for accessing the Windows OS as described in Windows credentials.
(If hosted on Linux) On the Now Platform, configure SSH credentials.
(Optional) For discovering using the WinRM protocol, see Configure WinRM trusted hosts on MID Server.
Oracle Fulfillment Server Oracle Fulfillment Server [cmdb_ci_appl_ora_fs] (If hosted on Unix) Configure applicative credentials.
(Optional) For discovering using the WinRM protocol, see Configure WinRM trusted hosts on MID Server.
Oracle GlassFish Server GlassFish [cmdb_ci_appl_glassfish] GlassFish WAR [cmdb_ci_appl_glassfish_war]
Oracle HTTP Server Oracle HTTP Server [cmdb_ci_appl_ora_http] (If hosted on Unix) Configure applicative credentials.
(If hosted on a Windows server) On the Now Platform, configure Windows credentials.
(If hosted on Linux) On the Now Platform, configure SSH credentials.
(Optional) For discovering using the WinRM protocol, see Configure WinRM trusted hosts on MID Server.
Oracle iAS Web Module Oracle iAS Web module [cmdb_ci_app_server_ora_ias_m] (If hosted on Unix) Configure applicative credentials.
(If hosted on a Windows server) On the Now Platform, configure Windows credentials.
(If hosted on Linux) On the Now Platform, configure SSH credentials.
Oracle Metric Client Oracle Metric Client [cmdb_ci_appl_ora_metric_client] (If hosted on Unix) Configure applicative credentials.
(If hosted on a Windows server) On the Now Platform, configure Windows credentials.
(If hosted on Linux) On the Now Platform, configure SSH credentials.
Oracle Metric Server Oracle Metric Server [cmdb_ci_appl_ora_metric_svr] (If hosted on Unix) Configure applicative credentials.
(If hosted on a Windows server) On the Now Platform, configure Windows credentials.
(If hosted on Linux) On the Now Platform, configure SSH credentials.
(Optional) For discovering using the WinRM protocol, see Configure WinRM trusted hosts on MID Server.
Oracle MySQL Server MySQL Instance [cmdb_ci_db_mysql_instance] Provide the following user or users:
  • For discovering Microsoft Biztalk using SQL queries, provide a user and credentials for Microsoft BizTalk.
  • For discovering licensing information on Microsoft SQL Server, provide a user and credentials for accessing Microsoft SQL Database.
Configure applicative credentials.
(If hosted on Linux) Give the user elevated rights to be able to run Service Mapping commands requiring a privileged user.
(If hosted on a Linux server) On the Now Platform, configure SSH credentials.
(If hosted on a Windows server) On the Now Platform, configure Windows credentials.
(Optional) For discovering using the WinRM protocol, see Configure WinRM trusted hosts on MID Server.
Oracle Net Listener Oracle Database Listener [cmdb_ci_db_ora_listener] (If hosted on Linux) On the Now Platform, configure SSH credentials.
Oracle Notification Server Oracle Notification Server [cmdb_ci_appl_ora_notif_svr] (If hosted on Unix) Configure applicative credentials.
(If hosted on Linux) On the Now Platform, configure SSH credentials.
Oracle OACORE Server Oracle OACORE Server [cmdb_ci_appl_ora_oacore] (If hosted on Unix) Configure applicative credentials.
(If hosted on Linux) On the Now Platform, configure SSH credentials.
(If hosted on a Windows server) On the Now Platform, configure Windows credentials.
Oracle OAFM Server Oracle OAFM Server [cmdb_ci_appl_ora_oafm] (If hosted on Unix) Configure applicative credentials.
(If hosted on Unix) On the Now Platform, configure SSH credentials.
(If hosted on a Windows server) On the Now Platform, configure Windows credentials.
Oracle PeopleSoft Peoplesoft Application Server [cmdb_ci_appl_peoplesoft] (If hosted on Unix) On the Now Platform, configure SSH credentials.
Provide a user with permissions to run commands described in Service Mapping commands not requiring a privileged user.
Oracle Process Manager Oracle Process Manager [cmdb_ci_appl_ora_pm] (If hosted on Unix) Configure applicative credentials.
(If hosted on Linux) On the Now Platform, configure SSH credentials.
(If hosted on a Windows server) On the Now Platform, configure Windows credentials.
(Optional) For discovering using the WinRM protocol, see Configure WinRM trusted hosts on MID Server.
Oracle Report Server Oracle Report Server [cmdb_ci_appl_ora_report] (If hosted on Unix) Configure applicative credentials.
(If hosted on Linux) On the Now Platform, configure SSH credentials.
(If hosted on a Windows server) On the Now Platform, configure Windows credentials.
(Optional) For discovering using the WinRM protocol, see Configure WinRM trusted hosts on MID Server.
Oracle Tnslsnr Engine Oracle TNS Listener Engine [cmdb_ci_appl_ora_tnslsnr] (If hosted on Unix) Configure applicative credentials.
(If hosted on Linux) On the Now Platform, configure SSH credentials.
(If hosted on a Windows server) On the Now Platform, configure Windows credentials.
Oracle Tuxedo and Oracle Tuxedo Portal Tuxedo [cmdb_ci_appl_tuxedo] and Tuxedo Portal [cmdb_ci_appl_tuxedo_portal]
Oracle WebLogic Module Oracle iAS Web module [cmdb_ci_app_server_ora_ias_m] (If hosted on Unix) Configure applicative credentials.
Oracle WebLogic Server (version 10.3) Weblogic [cmdb_ci_app_server_weblogic] (If hosted on Unix) Configure applicative credentials.
(If hosted on a Windows server) On the Now Platform, configure Windows credentials.
(If hosted on a Unix server) On the Now Platform, configure SSH credentials.
(Optional) For discovering using the WinRM protocol, see Configure WinRM trusted hosts on MID Server.
Oracle WebLogic On-demand Router Load Balancer Websphere ODR LB [cmdb_ci_app_server_ws_odr] (If hosted on Unix) Configure applicative credentials for Service Mapping.
(If hosted on a Windows server) On the Now Platform, configure Windows credentials.
(If hosted on a Unix server) On the Now Platform, configure SSH credentials.
Radware Alteon NG Alteon Load Balancer [cmdb_ci_lb_alteon] On the Now Platform, configure SNMP credentials.
Radware AppDirector Radware Load Balancer [cmdb_ci_lb_radware] On the Now Platform, configure SNMP credentials.
Red Hat Cluster Suite

Cluster Virtual IPs [cmdb_ci_cluster_vip]

UNIX Cluster [cmdb_ci_unix_cluster]

UNIX Cluster Node [cmdb_ci_unix_cluster_node]

UNIX Cluster Resource [cmdb_ci_unix_cluster_resource]

 On the Now Platform, configure SSH credentials.
Provide a user with permissions to read these files:
  • /etc/cluster/cluster.conf
  • /etc/hosts
Provide a user with elevated rights for running this command: clustat –x.
PostgreSQL Database PostgreSQL Instance [cmdb_ci_db_postgresql_instance] (If hosted on Unix) Configure applicative credentials.
(If hosted on a Windows server) On the Now Platform, configure Windows credentials.
(If hosted on a Unix server) On the Now Platform, configure SSH credentials.
(For hosted on Unix only) Give this user elevated rights to be able to run Service Mapping commands requiring a privileged user.
(Optional) For discovering using the WinRM protocol, see Configure WinRM trusted hosts on MID Server.
Pivotal RabbitMQ RabbitMQ Cluster [cmdb_ci_appl_rabbitmq_cluster] (If hosted on Unix) Configure applicative credentials.
(If hosted on a Windows server) On the Now Platform, configure Windows credentials.
(If hosted on a Unix server) On the Now Platform, configure SSH credentials.
(Optional) For discovering using the WinRM protocol, see Configure WinRM trusted hosts on MID Server.
SAP Business Object XI Schedule SAP BO BOXIScheduleRouter [cmdb_ci_appl_sap_bo_scheduler] On the Now Platform, configure Windows credentials.
(Optional) For discovering using the WinRM protocol, seew Configure WinRM trusted hosts on MID Server.
SAP Crystal Management Server SAP Business Objects CMS server [cmdb_ci_appl_sap_bo] On the Now Platform, configure Windows credentials.
(Optional) For discovering using the WinRM protocol, see Configure WinRM trusted hosts on MID Server.
SAP Central Instance/

SAP Central Services (SCS)/

SAP Development Infrastructure/

SAP Evaluated Receipt Settlement (ERS)/

SAP Java Connector/

SAP NetWeaver Dialog Instance/

ABAP SAP Central Services (ASCS)

 SAP CI Application [cmdb_ci_appl_sap_ci]/

SAP SCS Application [cmdb_ci_appl_sap_scs]/

SAP DI Application [cmdb_ci_appl_sap_di]/

SAP ERS Application [cmdb_ci_appl_sap_ers]/

SAP JC Application [cmdb_ci_appl_sap_jc]/

SAP DI Application [cmdb_ci_appl_sap_di]/

SAP ASCS Application [cmdb_ci_appl_sap_ascs]
  • (If hosted on a UNIX server) On the Now Platform, configure applicative credentials and SSH credentials. The SSH credentials are used to create connections from SAP Central Instance to other applications and devices. In addition, provide the user elevated rights to be able to run commands requiring a privileged user: Service Mapping commands requiring a privileged user.
  • (If hosted on a Windows server) On the Now Platform, configure Windows credentials to create connections from SAP Central Instance to other applications and devices.
  • (Optional) For discovering using the WinRM protocol, see Configure WinRM trusted hosts on MID Server.
  • (Optional for top-down discovery by Service Mapping) Provide a user with permissions to run SOAP on RFC read table function.
  • (Optional for top-down discovery by Service Mapping) If your organization deploys SAP Digital Business Services using web services and you want to map all connected services, perform the following actions:
SAP HANA Database SAP Hana Db [cmdb_ci_appl_sap_hana_db] (If hosted on a Windows server) On the Now Platform, configure Windows credentials.
(If hosted on a Unix server) On the Now Platform, configure SSH credentials.
(Optional) For discovering using the WinRM protocol, see Configure WinRM trusted hosts on MID Server.
SAP Sybase DB Sybase Instance [cmdb_ci_db_syb_instance] (If hosted on Unix) Configure applicative credentials.
(If hosted on a Windows server) On the Now Platform, configure Windows credentials.
(If hosted on a Unix server) On the Now Platform, configure SSH credentials.
(For hosted on Unix only) Give this user elevated rights to be able to run Service Mapping commands requiring a privileged user.
(Optional) For discovering using the WinRM protocol, see Configure WinRM trusted hosts on MID Server.
SQL Server Analysis Services (SSAS) SQL Server Analysis Services [cmdb_ci_db_mssql_analysis] On the Now Platform, configure Windows credentials.
SQL Server Integration Services (SSIS) Job SQL Server Integration Services Job [cmdb_ci_db_mssql_int_job] On the Now Platform, configure Windows credentials.
SQL Server Integration Services (SSIS) SQL Server Integration Services [cmdb_ci_db_mssql_integration] On the Now Platform, configure Windows credentials.
(Optional) For discovering using the WinRM protocol, see Configure WinRM trusted hosts on MID Server.
SQL Server Reporting Services (SSRS) SQL Server Reporting Services [cmdb_ci_db_mssql_reporting] Provide an SSRS OS user with permissions to run the SSRS Service.

Configure credentials for a user with permissions to run http get request to the entry point URL.
(If hosted on a Unix server) On the Now Platform, configure SSH credentials.

Set the Credential alias attribute to [cmdb_ci_db_mssql_reporting]. Configuring this attribute allows you later to use the credential for this CI in patterns.

(Optional) To discover connections to report datasources, configure credentials for a user with the permission to run http post request to the entry point URL.
Configure applicative credentials.
(Optional) For discovering using the WinRM protocol, see Configure WinRM trusted hosts on MID Server.
Sun iPlanet Web Server Iplanet Web Server [cmdb_ci_iplanet_web_server] Configure applicative credentials.
On the Now Platform, configure SSH credentials.
Sun Directory Sun LDAP Server [cmdb_ci_sun_ldap_dir_server] Configure applicative credentials.
On the Now Platform, configure SSH credentials.
Sun JES JES [cmdb_ci_email_server_jes] Configure applicative credentials.
On the Now Platform, configure SSH credentials.
Symantec Enterprise Vault Enterprise Vault [cmdb_ci_email_server_ent_vault] On the Now Platform, configure Windows credentials.
TIBCO ActiveMatrix BusinessWorks/

TIBCO ActiveMatrix BusinessWorks Process/

TIBCO EMS Queue/

TIBCO Enterprise Message Service (EMS)/

 ActiveMatrix Business Works [cmdb_ci_appl_tibco_matrix]/

ActiveMatrix Business Works Process [cmdb_ci_appl_tibco_matrix_proc]/

EMS Queue [cmdb_ci_appl_tibco_queue]/

Tibco Enterprise Message Service [cmdb_ci_appl_tibco_message]
TIBCO ActiveMatrix Adapter Tibco Adapter [cmdb_ci_appl_tibco_adapter] (If hosted on a Unix server) On the Now Platform, configure SSH credentials.
(If hosted on a Windows server) On the Now Platform, configure Windows credentials.
Veritas Enterprise Vault Enterprise Vault [cmdb_ci_email_server_ent_vault] (If hosted on a Windows server) On the Now Platform, configure Windows credentials.

Resolving credential-related issues

If there are discovery issues caused by incorrectly configured or missing credentials, resolve them as explained in the KB article: Credentials & Permissions troubleshooting on Discovery, Service Mapping, Orchestration