ScriptOnlyCheck
Admin Role Concentration
nowisor-admin-role-concentrationPer-check documentation for the open-source ServiceNow security agent. Each page describes one check from the pack: what it detects, why it matters for compliance, the attack path, remediation, and a verification Background Script.
nowisor-admin-role-concentrationnowisor-ai-agent-elevated-runasnowisor-basic-auth-role-without-wsaonowisor-cookie-http-onlynowisor-cookie-securenowisor-csrf-token-enforcementnowisor-eval-usage-detectornowisor-glide-evaluator-detectornowisor-hardcoded-credentialsnowisor-mfa-enforcementnowisor-ai-prompt-injection-exposurenowisor-rest-anonymous-accessnowisor-set-roles-detectornowisor-set-workflow-false-detectornowisor-ai-shadow-llm-endpointnowisor-update-set-xml-suspiciousnowisor-ai-inbound-agent-ungovernednowisor-ai-agent-unreviewed-prodnowisor-ai-agent-audit-retentionnowisor-ai-guardrail-hitlnowisor-ai-agent-unownednowisor-ai-control-tower-coverage-gapnowisor-ai-governance-unconfigurednowisor-attachment-role-restrictionnowisor-audit-coverage-gapnowisor-basic-auth-enforcement-posturenowisor-basic-auth-hybrid-undecidednowisor-domain-separation-script-includenowisor-cross-scope-privilege-grantsnowisor-direct-property-writenowisor-elevated-role-assignmentsnowisor-external-auth-policynowisor-glide-record-vs-securenowisor-inactive-users-with-rolesnowisor-ai-llm-data-residencynowisor-ai-mcp-exposure-scopenowisor-ai-shared-runas-identitynowisor-ai-llm-payload-maskingnowisor-oob-acl-modificationsnowisor-secure-cookiesnowisor-session-timeoutnowisor-ai-subprod-unmasked-posturenowisor-basic-auth-restriction-inactivenowisor-basic-auth-stale-api-accountsnowisor-fabricated-property-referencesnowisor-ai-dormant-skill-grantsnowisor-meta-active-check-coveragenowisor-ai-kill-switch-absentnowisor-platform-build-drift