Installing ServiceNow Apps

This section describes how to install ServiceNow apps for use with Carbon Black Cloud.

Three apps are available:

• To create incidents from Alerts, install either the ITSM App or the SecOps App depending on whether you have the ITSM or SecOps module in ServiceNow.
• To receive vulnerability information from Carbon Black Cloud, install the Vulnerability Response app. This app can be used alone or in combination with the ITSM or SecOps Apps.

Installation Permissions

Installation requires one of the following permissions:

• ServiceNow System Administrator Role, which includes permissions for the following actions:
  • Installation of the integration application plugins
  • Mid_server to configure data ingest from an AWS S3 bucket
  • Read, write and delete any record
  • Execute all SOAR actions
  • View Application Logs
  • Access Support Contact
  • Uninstall Application
• Carbon Black Cloud Admin (x_vmw_cb_connector.admin) role.
  Note: Only available if it has been configured during a previous installation of a Carbon Black Cloud app.