Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
@@ -0,0 +1,4 @@
This script identifies active users in ServiceNow who have no group memberships and no roles assigned.
It queries the sys_user table for all active users, then checks each user against the sys_user_grmember table (groups) and the sys_user_has_role table (roles).
If a user has no associated groups and no assigned roles, their username is added to a list called orphanedUsers.
Finally, the script prints the list, which can be used for user cleanup, security audits, or compliance purposes to ensure proper user management.
Original file line number Diff line number Diff line change
@@ -0,0 +1,23 @@
var userRecord = new GlideRecord('sys_user');
userRecord.addQuery('active', true);
userRecord.query();

var orphanedUsers = [];

while(userRecord.next()) {
var userSysId = userRecord.getValue('sys_id');

var userGroups = new GlideRecord('sys_user_grmember');
userGroups.addQuery('user', userSysId);
userGroups.query();

var userRoles = new GlideRecord('sys_user_has_role');
userRoles.addQuery('user', userSysId);
userRoles.query();

if(!userGroups.hasNext() && !userRoles.hasNext()) {
orphanedUsers.push(userRecord.getValue('user_name'));
}
}

gs.print('Orphaned Users: ' + orphanedUsers.join(', '));
Loading