servicenow
6 Dtwo policies tagged "servicenow", including Default-Deny Unknown ServiceNow Tools, Fence Sensitive ServiceNow Tables. Browse by what the control does rather than which app it targets.
Default-Deny Unknown ServiceNow ToolsMaintains an allowlist of audited ServiceNow tool-name suffixes and denies any tool call whose name does not match an allowlisted entry.Fence Sensitive ServiceNow TablesFences off the most sensitive ServiceNow tables from two routes that reach them:Force ServiceNow Comments to Internal Work NotesKeeps agent-drafted ServiceNow comments off the customer/employee-visible journal by rewriting add comment calls to internal work notes.Freeze ServiceNow Identity PlaneFreezes the identity-and-access mutation surface of the ServiceNow MCP server. The policy denies, by tool-name suffix:Human-Only ServiceNow Change ApprovalUnconditionally denies the ServiceNow change-management control-gate tools — the ones whose names end in approve change, reject change, or submit change for…ServiceNow: Role-Gated Writes (Read-Only Default)else fails closed