Set up a ServiceNow data store

This page describes how to create a data store and connect ServiceNow to Gemini Enterprise.

Before you begin

Before setting up your ServiceNow connection, ensure you have the following in place:

Grant the Discovery Engine Editor role (roles/discoveryengine.editor). This role is required for the user to create the data store. To grant this role, do the following:
1. In the Google Cloud console, go to the IAMpage.
  Go to IAM
2. Locate the user account and click the edit Editicon.
3. Grant the Discovery Engine Editor role to the user. For more information, see IAM roles and permissions .
Set up ServiceNow account and obtain authentication credentials
Set up administrator role and use administrator account to set the required user roles and permissions .
Set up a Google Cloud project with an administrator account capable of managing organization-level configurations, ensuring the organization can set up a workforce pool. Make sure your organization is set up to manage a workforce pool.
To enable keyword search capabilities, ensure that "table indexing" is enabled on your ServiceNow instance. For information, see Configure table for indexing and searching .

Create ServiceNow data store

To create a ServiceNow data store, perform the following steps:

In the Google Cloud console, go to the Gemini Enterprise page.

Gemini Enterprise
Select or create a Google Cloud project.

Note: To access the unified flow, your project must be on the allowlist.
In the navigation menu, click Data stores.
Click Create data store.
In the Sourcesection, search for ServiceNow, and click Select.
In the Datasection:
1. In the Connector modesection, select Data ingestionor Federated searchas the connection mode.
2. Click Continue.
3. In the Authentication settingssection, configure authentication based on your chosen connection mode.
  - If you selected Federated search, enter the following details:
    - Instance URL: The base URL of your ServiceNow instance.
    - Client ID: The OAuth client ID for your application.
    - Client Secret: The OAuth client secret for your application.
    - Auth URI: The authorization endpoint URL provided by ServiceNow.
    - Token URI: The token endpoint URL provided by ServiceNow.
    - User ID: The ServiceNow user ID.
    - Password: The password for the ServiceNow user.
  - If you selected Data ingestion, enter the following details:
    - Instance URL: The base URL of your ServiceNow instance.
    - Client ID: The OAuth client ID for your application.
    - Client Secret: The OAuth client secret for your application.
    - User ID: The ServiceNow user ID.
    - Password: The password for the ServiceNow user.
    For more information about credentials, see ServiceNow configuration .
  - If you selected Federated Search, click Loginand complete the ServiceNow sign-in.
4. Click Continue.
5. If you selected Federated search, do the following:
  1. In the Destinationssection:
    1. Enter Instance URLof your ServiceNow site.
    2. Enter Base URLof your ServiceNow site.
  2. Click Continue.
  3. Optional: In the Advanced optionssection, to expose or hide ServiceNow system tables, select the Include system tablescheckbox.
  4. Click Continue.
6. If you selected Data ingestion, in the Advanced optionssection do the following:
  1. Optional: In the URL suffixfield, enter the URL suffix from the knowledge or catalog portal link.
  2. Optional: To allow a set of static IP addresses in your system, select the Enable static IP addressescheckbox.
  3. Optional: In the Max QPSfield, enter the maximum queries per second to apply a rate limit on the queries that the connector sends to the ServiceNow instance.
  4. Click Continue.
7. In the Entities to search(if you selected Federated search) or Entities to sync(if you selected Data ingestion) section select all the required entities.
  - If you selected Federated search, proceed to the next step.
  - If you selected Data ingestion, continue with the following steps:
    1. Optional:To sync specific projects, do the following:
      1. Click Filter.
      2. To filter entities out of the index, select the Exclude from the indexcheckbox, or to ensure that they are included in the index, select the Include to the indexcheckbox.
      3. Enter the keys. Press enter after each key.
      4. Click Save.
    2. To configure the sync schedule, do the following:
      1. In the Sync frequencylist, select the sync frequency.
        
        To schedule separate full syncs of entity and identity data, expand the menu in the Full syncsection and then select Custom options.
      2. In the Incremental sync frequencylist, select the incremental sync frequency. For more information, see Sync schedules .
Click Continue.
In the Actionssection:
- If you selected Federated search, from Select ServiceNow actions to enable, select the actions from the category to enable them for the connector.
- If you selected Data ingestion:
  1. In the Authentication settingssection, configure authentication based on your chosen connection mode.
  2. Provide the following authentication details as necessary:
    - Instance URL: The base URL of your ServiceNow instance.
    - Client ID: The OAuth client ID for your application.
    - Client Secret: The OAuth client secret for your application.
    - Auth URI: The authorization endpoint URL provided by ServiceNow.
    - Token URI: The token endpoint URL provided by ServiceNow.
    - User ID: The ServiceNow user ID.
    - Password: The password for the ServiceNow user.
    For more information about credentials, see ServiceNow configuration .
  3. Click Loginand sign-in to ServiceNow to verify your account.
  4. Click Continue.
  5. Optional: In the Advanced optionssection, to expose or hide ServiceNow system tables, select the Include system tablescheckbox.
  6. Click Continue.
  7. In the Destinationssection:
    1. Optional: Enter Instance URLof your ServiceNow site.
    2. Optional: Enter Base URLof your ServiceNow site.
  8. Click Continue.
  9. From Select ServiceNow actions to enable, select the actions from the category to enable them for the connector.
  Note: If you skip adding actions in this step, you need to create a new data store to add actions.
  
  To view the list of actions, see View actions .
Click Continue.
In the Configurationsection:
1. From the Multi-regionlist, select the location for your data connector.
2. In the Data connector namefield, enter a name for your connector.
3. If you selected US or EU as the location, configure the Encryption settings:
  - Optional: If you haven't configured single-region keys, click Go to settings pageto do so. For more information, see Register a single-region key for third-party connectors .
  - Select Google-managed encryption keyor Cloud KMS key.
  - If you selected Cloud KMS key:
    - In the Key management typelist, select the appropriate type.
    - In the Cloud KMS keylist, select the key.
  For more information, see Customer-managed encryption keys .
Click Continue.
In the Billingsection, select General pricingor Configurable pricing. For more information, see Verify the billing status of your projects and Licenses .
Click Create. Gemini Enterprise creates your data store and displays your data stores on the Data Storespage.

On the Data Storespage, click your data store name to see the status. After the data store state changes from Creatingto Active, the ServiceNow connector is ready to be used.

For an ingestion connector created with ServiceNow, the data store state transitions from Creatingto Runningupon synchronization initiation. It then changes to Activeonce ingestion is complete, signifying that the data store is fully configured. Depending on data volume, ingestion may require several hours.

After creating the data store, create an app , connect it to the ServiceNow data store , and authorize Gemini Enterprise to access ServiceNow before executing any queries.

Data handling and query execution

This section describes how Gemini Enterprise manages your query and the privacy implications of using the federated data store.

Query execution

After you authorize ServiceNow and send a search query to Gemini Enterprise:

Gemini Enterprise sends your search query directly to the ServiceNow API.
Gemini Enterprise blends the results with those from other connected data sources and displays a comprehensive search result.

Data handling

When using third-party federated search, the following data handling rules apply:

Your query string is sent to the third-party search backend (ServiceNow API).
These third parties may associate queries with your identity.
If multiple federated search data sources are enabled, the query might be sent to all of them.
Once the data reaches the third-party system, it is governed by that system's terms of service and privacy policies.

What's next

To provide a user interface for querying your ServiceNow data, create an app and connect it to the ServiceNow data store .
To view the list of actions, see View actions .
To preview how your search results appear after your app is set up, see Get search results .
To enable alerts for the data store, see Configure alerts for third-party data stores .