EmpowerID provides two methods for creating groups,Create GroupandCreate Group Simple. TheCreate Group Simpleform has the bare minimum of fields and options to create a group. But if you need to set advanced options on requests, deletions, high security, or valid dates, thenCreate Groupis the best option.
This topic demonstrates how to create a ServiceNow group using both methods.
Creating a ServiceNow security group in EmpowerID using the simple method
Creating a ServiceNow security group in EmpowerID using the advanced method
Creating an EmpowerID group in ServiceNow
Verifying that the group was created in EmpowerID
Verifying that the group was created in ServiceNow
Prerequisites
Before you can create ServiceNow security groups, EmpowerID must first be connected to ServiceNow. For the details, seeConnecting to ServiceNow.
To create a ServiceNow security group using the simple method
From the Navigation Sidebar of the EmpowerID Web interface, expandIdentities and clickGroups.
From theActionspane of Group Manager, click theCreate Group Simpleaction.
In theCreate Groupform that appears, type a name and description in theNameandDescriptionfields, respectively.
BelowGroup Creation Location, click theSelect a Locationlink. Search for and select the ServiceNow location, and clickSaveto save the location.
TheGroup Typeautomatically becomes Generic Group.
Optionally, type any comments in theComments or Justificationfield.
ClickSave.
To create a ServiceNow group using advanced features
From the Navigation Sidebar of the EmpowerID Web interface, expandIdentities and clickGroups.
From theActionspane of Group Manager, click theCreate Groupaction.
In the General section of theCreate Groupform that appears, set these values.
Enter values for the group in theName,Logon NameandDisplay Name fields, respectively.
BelowGroup Creation Location, clickSelect a Location, select the ServiceNow directory location, and clickSaveto close the Location Selector.
From theGroup Typedrop-down, select Generic Group.
Type a description in theDescriptionfield.
You can also use the following optional settings.
If you have Microsoft Exchange and haveconfiguredEmpowerID for Exchange, you may selectIs Mail Enabledto mail-enable the group.
If you selectedIs Mail Enabled, select the suffix for the email address from theEmail Suffixdrop-down.
Add any notes to theNotesfield.
Select or clearAllow Join Requests. If selected, users can shop for the group in the IT Shop.
Select or clearAuto-Accept Join or Leave Requests. If selected, users can self-service join and leave the group without requiring approval.
Auto-Accept only works ifAllow Join Group Requestsisenabled.
In theAdvancedsection of the Create Group form, you can use the following optional settings.
SelectPrevent Deletion in EmpowerIDif you want to prevent the group from being deleted via the EmpowerID UI.
SelectIs High Security Groupif the group meets that criteria.
If you have a custom workflow that uses it, click theValid Untilfield and select a date from the calendar control.
Add any comments to theComments or Justificationfield.
Click Save.
To create an EmpowerID group in ServiceNow
Log in to your ServiceNow instance, and in the navigation pane, under Self-Service, selectService Catalog, and click theServicestile.
In the list of services, click theEmpowerID Service Catalog Request.
Enter a Group Description and a Group Name, and clickOrder Now.
An Order Status message appears with details about your request. If you expand the Stage field, you can see that the request is waiting for approval by the System Administrator.
In the navigation pane, under Self-Service, selectMy Approvals, and click the first approval. (You can hover over the info button to see details and ensure that you have the correct one.)
On the Approval form, change theStatetoApprovedand click theApprove button.
To see the group created in EmpowerID, in the navigation pane, expandIdentities, selectGroups, and search for the group. Note that groups created in ServiceNow have GUIDs for their logon names.
To verify that the group was created in EmpowerID
In the Navigation Sidebar, expandSystem Logsand clickAudit Log.
On theAudit Logtab, typeCreate Groupin theSearchfield and press ENTER. You should see a record returned for the group. This record allows you to see who requested and approved creation of the group, when it was created, etc.
To verify that the group was created in ServiceNow
In ServiceNow, search forGroupsand select the one underSystem Security,Users and Groups.
Above the list of groups, change theGo tovalue toNameorDescription, and search for your group.