Create a user mapping permission crawl for an external content connector

  • Freigeben Version: Australia
  • Aktualisiert 12. März 2026
  • 4 Minuten Lesedauer

    • Retrieve security principals from your source system with a user mapping permission crawl. Run the crawl as a one-time task or schedule it to run on a recurring basis.

    Vorbereitungen

    To run crawls for external content connectors, your instance must have inbound mTLS support enabled. For details on verifying that this feature is enabled on your instance, see Verify whether inbound mTLS support is enabled for your instance.

    Role required: ais_adminsn_ext_conn.xcc_admin

    Warum und wann dieser Vorgang ausgeführt wird

    Many external content connectors support preservation of access permissions for searchable content retrieved from their source systems. To use this feature, search administrators must retrieve security principals from the connector's source system by creating a user mapping crawluser permission crawl for the connector.

    The user mapping permission crawl maps security principals retrieved from the source system to users in your ServiceNow AI Platform® instance. Each user that corresponds to a source system security principal inherits content access permissions specified for that security principal.

    A user mapping permission crawl may take hours or days to complete, depending on the number of security principals defined in your source system.

    You can run a user mapping permission crawl as a one-time task or set it to recur on a scheduled basis.
    Hinweis:
    Beginning with External Content Connectors 6.0, the External Content Connectors application allows a maximum of five connector crawls to run simultaneously on your ServiceNow AI Platform® instance. Both content crawls and user permission crawls count against this limit. You can schedule and run external content connector crawls throughout the day to avoid overlap, or create a Customer Service and Support case at https://support.servicenow.com/now to request a limit increase.
    For external content connectors that support user mapping permission crawls, you can also start a user mapping permission crawl by selecting the Update user mappings permissions option when creating or scheduling a content crawl. For more details on this option and defining content crawls, see Create a content crawl for an external content connector.
    Hinweis:
    The following external content connectors don't retrieve user or group access permissions. You can't run user mapping permission crawls for these connectors.
    • Adobe Experience Manager as a Cloud Service external content connector
    • Amazon S3 external content connector
    • Cornerstone external content connector
    • Predefined web sources external content connector
    • ServiceNow® product documentation external content connector
    • Slack external content connector
    • Trello external content connector
    • Webcrawler external content connector

    The Atlassian Confluence Cloud external content connector only retrieves permissions for Confluence Cloud users who have made their email addresses visible to all users. To allow user mapping permission, each Confluence Cloud user must set their own email visibility to Anyone as explained in the https://support.atlassian.com/confluence-cloud/docs/configure-user-email-visibility/ Atlassian support resource.

    Prozedur

    1. Navigate to All > External Content Connectors > External Content Admin Home.
    2. In the Connectors list, select the record for the connector that you want to create a user mapping permission crawl for.
    3. In the connector editor's Create crawls tab, select Crawl user permissions.
      The Crawl user permissions dialog box appears, with the User mapping permission crawl tile selected.
    4. Wahlweise: To make your user mapping permission crawl run on a recurrent schedule, select the Make recurring option, then specify the schedule options.
      Hinweis:
      If the Make recurring option isn't shown, the external content connector automatically schedules its own user mapping permission crawls. In this case, you can only run one-time user mapping permission crawls.
      1. Enter a name for your scheduled crawl.
      2. Select Daily or Weekly as the frequency for your scheduled crawl.
      3. If you selected Weekly as the crawl frequency, select the options for the days of the week that you want your scheduled crawl to run on.
      4. Specify when you want the system to run your scheduled crawl by entering its start time and selecting a time zone.
        The start time should be in hh:mm a format, where the format parameters have the following values:
        • hh: a one- or two-digit hour between 0 and 12 inclusive, such as 5 or 11
        • mm: a two-digit minute between 00 and 59 inclusive, such as 15 or 37
        • a: any of A, a, AM, or am for AM (morning) or any of P, p, PM, or pm for PM (afternoon)
    5. Create your new user mapping permission crawl by selecting the appropriate option.
      • If you skipped step 4, select Crawl user permissions.
      • If you selected the Make recurring option in step 4, select Create user crawl schedule.

    Ergebnisse

    If you skipped step 4, your new user mapping permission crawl is added to the system's crawl queue. The system runs your crawl when it has resources available to do so.

    If you selected the Make recurring option in step 4, your new crawl appears in the Crawl schedules list in the external content connector editor's Create crawls tab.

    Nächste Maßnahme

    You can monitor your user mapping permission crawl's status or review its results using the crawl history and analytics. For details on these metrics, see Review crawl history and analytics for an external content connector and Review user mappings permissions for an external content connector.

    If you need to cancel your running user mapping permission crawl, see Cancel a running external content connector crawl.