License key discovery and access control tables
Summarize
Summary of License key discovery and access control tables
This content provides detailed reference information about the tables, fields, access controls, and scheduled jobs used in license key discovery within the Agent Client Collector for Visibility in ServiceNow. It is relevant for customers managing software asset management (SAM) and license key tracking across endpoints.
Show less
License Key Discovery Tables and Their Purpose
- License Registry Configuration (snaccviscontentlicenseregistryconfig): Admin-managed list of Windows registry paths and value names to collect license key data from endpoints.
- License Keys (snaccviscontentlicensekeys): Stores the actual license key values collected from devices, along with related metadata.
Key Fields in License Keys Table
- Configuration Item: The device from which the key was collected, linked to the CMDB computer table.
- Product: The SAM product associated with the license key.
- User: Automatically set to the user assigned to the configuration item.
- License Key Config: The registry configuration rule that discovered the key.
- Resolved Registry Path: Exact registry location on the endpoint where the key was read.
- License Key: The discovered license key value.
- Last Scanned: Date when the key was last detected by the agent.
- Absent: Indicates the key is no longer found; records are never deleted but marked absent.
Key Fields in License Registry Configuration Table
- Product: Links the license key to a SAM Professional product.
- Registry Path: Specifies the Windows registry path to read keys from.
- Registry Value Name: The specific registry value to read for the key.
- Name: Automatically set combining Product and Registry Value Name.
- Description: Notes about the configuration record.
- Active: Controls whether this record is included in future collections; disabling excludes it from scans.
Note: The combination of Product, Registry Path, and Registry Value Name must be unique across all configuration records to ensure accurate discovery.
Access Control
Role-based access is defined to protect license key data:
- ACC application admin: Can read, write, and create in License Registry Configuration; read-only access to License Keys.
- Discovery admin: Same access as ACC admin.
- SAM admin: Read-only access to both tables.
- All other roles: No access.
Scheduled Job for License Key Discovery
A scheduled job named "Refresh License Key Config File" runs daily at 8:30 a.m. UTC to update license key configurations. This job runs only if the property snaccviscontent.enablelicensekeydiscovery is set to true and the SAM Professional plugin is activated.
Reference information for the tables, fields, access control, and scheduled job used by license key discovery in Agent Client Collector for Visibility - Content.
Tables
License key discovery uses the following tables.
| Table | Label | Purpose |
|---|---|---|
| sn_acc_vis_content_license_registry_config | License Registry Configuration | Admin-managed list of registry paths and value names to collect from managed endpoints. |
| sn_acc_vis_content_license_keys | License Keys | Stores the license key values collected from endpoint devices. |
License Keys table fields
The License Keys [sn_acc_vis_content_license_keys] table stores the following fields for each discovered key.
| Field | Description |
|---|---|
| Configuration Item | Device the key was collected from. Table: cmdb_ci_computer. |
| Product | SAM product associated with this key. Table: samp_sw_product. |
| User | This field is automatically set to the user assigned to the CI. Table: sys_user. |
| License Key Config | Configuration rule that discovered this key. Table: sn_acc_vis_content_license_registry_config. |
| Resolved Registry Path | Exact registry path the key was read from on the endpoint. |
| License Key | Discovered key value. |
| Last Scanned | Date the key was last detected by the agent. |
| Absent | Selected when the key is no longer found on the device. Records are never deleted, they are marked Absent instead. |
License Registry Configuration form fields
The following table describes the fields in the License Registry Configuration [sn_acc_vis_content_license_registry_config] table.
| Field | Description |
|---|---|
| Product | SAM product this license key belongs to. Links to the SAM Professional product catalog. |
| Registry Path | Windows registry path where the key is stored. For example, HKLM\SOFTWARE\Microsoft\Office\16.0\Registration. |
| Registry Value Name | Specific registry value to read. For example, DigitalProductId. |
| Name | This field is automatically set to a combination of the Product and Registry Value Name values. |
| Description | Notes about this configuration record. |
| Active | Indicator of whether this record is included in future collections. Clearing this check box removes the record from future collections. |
Access control
The following table shows which roles can access each license key discovery table.
| Role | License Registry Configuration table | License Keys table |
|---|---|---|
| ACC application admin (agent_client_collector_admin) | Read, write, create | Read only |
| Discovery admin (discovery_admin) | Read, write, create | Read only |
| SAM admin (sam_admin) | Read only | Read only |
| All other roles | No access | No access |
Scheduled job
The following scheduled job supports license key discovery.
| Job | Schedule | Condition |
|---|---|---|
| Refresh License Key Config File | Daily at 8:30 a.m. UTC | Runs only when the sn_acc_vis_content.enable_license_key_discovery property is set to true and the SAM Professional plugin (com.snc.samp) is activated. |