Policy: Azure > IAM > Role Assignment > ServiceNow > Configuration Item > Record

The policy facilitates the accurate representation of cloud resource within the ServiceNow environment, ensuring that critical data is effectively mapped and managed. Attribute of an Azure > IAM > Role Assignment is systematically mapped to a specific column in a ServiceNow table.

The policy allows enabling organizations to select and map only those attributes that are most relevant to their operational needs. It significantly reduces the manual effort involved in data transfer and minimizes the risk of errors, thereby enhancing the overall efficiency of data management.

Resource Types

This policy targets the following resource types:

Azure > IAM > Role Assignment

Primary Policy

This policy is used with the following primary policy:

Azure > IAM > Role Assignment > ServiceNow > Configuration Item

Controls

Policy Specification

Schema Type	`object`
Default template	`id: {{ $.resource.data.id \| dump \| safe }} principaltype: {{ $.resource.data.principalType \| dump \| safe }} principal_id: {{ $.resource.data.principalId \| dump \| safe }} roledefinitionid: {{ $.resource.data.roleDefinitionId \| dump \| safe }} role_assignment_name: {{ $.resource.data.name \| dump \| safe }} scope: {{ $.resource.data.scope \| dump \| safe }} subscription_id: {{ $.resource.metadata.azure.subscriptionId \| dump \| safe }} type: {{ $.resource.data.type \| dump \| safe }}`
Default template input	`\| { resource: roleAssignment{ data metadata turbot { akas id tags title } } }`

Schema Type

object

Default template

id: {{ $.resource.data.id | dump | safe }}
principaltype: {{ $.resource.data.principalType | dump | safe }}
principal_id: {{ $.resource.data.principalId | dump | safe }}
roledefinitionid: {{ $.resource.data.roleDefinitionId | dump | safe }}
role_assignment_name: {{ $.resource.data.name | dump | safe }}
scope: {{ $.resource.data.scope | dump | safe }}
subscription_id: {{ $.resource.metadata.azure.subscriptionId | dump | safe }}
type: {{ $.resource.data.type | dump | safe }}

Default template input

|
  {
    resource: roleAssignment{
      data
      metadata
      turbot {
        akas
        id
        tags
        title
      }
    }
  }

In Your Workspace

Policy Settings by Type report

Developers

Category URI

tmod:@turbot/turbot#/control/categories/cmdbExternal

Policy Type URI

tmod:@turbot/servicenow-azure-iam#/policy/types/roleAssignmentServiceNowConfigurationItemRecord

GraphQL

query policyType(id: "tmod:@turbot/servicenow-azure-iam#/policy/types/roleAssignmentServiceNowConfigurationItemRecord") { … }

query policySettings(filter: "policyTypeId:'tmod:@turbot/servicenow-azure-iam#/policy/types/roleAssignmentServiceNowConfigurationItemRecord'") { … }

query policyValues(filter: "policyTypeId:'tmod:@turbot/servicenow-azure-iam#/policy/types/roleAssignmentServiceNowConfigurationItemRecord'") { … }

CLI

Get Policy Type

turbot graphql policy-type --id "tmod:@turbot/servicenow-azure-iam#/policy/types/roleAssignmentServiceNowConfigurationItemRecord"

Get Policy Settings

turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/servicenow-azure-iam#/policy/types/roleAssignmentServiceNowConfigurationItemRecord"