External content security for AI Search
Summarize
Summary of External Content Security for AI Search
External content security in AI Search enables the preservation of user and group security access permissions for documents indexed from external sources. This functionality allows ServiceNow AI Platform customers to control access to search results by mapping externally defined users and groups to ServiceNow users.
Show less
Key Features
- Access Permissions: Specify access permissions for each external document during ingestion, allowing or denying access globally or to specific users and groups. Permissions are preserved during indexing.
- User Mappings: Create user mappings to connect externally defined users and groups with ServiceNow AI Platform users. This facilitates the application of security permissions during search queries.
- Security Implementation: AI Search evaluates user mappings against access permissions to determine if a user can view search results from indexed external documents.
Key Outcomes
By implementing external content security, ServiceNow customers can ensure that sensitive information remains protected, while still allowing relevant users access to necessary search results. This setup is crucial for maintaining compliance and enhancing the security of information retrieval in the organization.
AI Search preserves user and group security access permissions specified for documents indexed from external sources. You can control access to external content search results by mapping these externally defined users and groups to ServiceNow AI Platform® users.
For an overview of AI Search content security, see Content security in AI Search.
Requirements
To use external content security, include the following two steps in your ingestion and indexing process for external documents:
| Step | Description |
|---|---|
| Specify access permissions on each external document fed for ingestion | Access permissions for an external document can allow or deny access to the document globally (for all users), or can include lists of specific externally defined users and groups who are allowed or denied access to the document. AI Search preserves the external document's security access permissions during indexing. Additional information:
|
| Define user mappings in tables linked to external content indexed sources | A user mapping specifies externally defined user and group aliases for a ServiceNow AI Platform user. Link these user mappings to indexed sources for external content. AI Search uses an indexed source's user mappings in conjunction with indexed records' access permissions to determine ServiceNow AI Platform user access for search results from the indexed source. Additional information:
|
Security implementation for search queries
- Examines the user mappings linked to the record's indexed source and retrieves the set of all externally defined users and groups aliased to the current ServiceNow AI Platform user's account.
- Compares the mapped set of externally defined user and group aliases with the access permissions on the indexed search result record to see whether the ServiceNow AI Platform user should be allowed to view the search result.