Configure Veza access intelligence in the agent map

concept brazil Updated Sep 8, 2026 2 min read gov-sec-configure-veza-access-intelligence.md
Raw file servicenow.com

Integrate Veza with ServiceNow using OAuth 2.0 to display agent risk scores and severity levels in the agent map.

Veza access intelligence requires a connection between ServiceNow and each hyperscaler that hosts governed AI assets. ServiceNow and Veza each maintain separate connections to hyperscalers to retrieve and correlate AI asset data. Access intelligence supports governed agents hosted by Amazon Web Services (AWS), Gemini Enterprise Agent Platform, Azure AI Foundry, and Salesforce.

Complete the following in order:

  1. In your Veza tenant, configure integrations for all of the supported hyperscalers that you want to connect to. For more information, see Veza integrations.
  2. In AI Control Tower, navigate to Settings > Integrations > Connectors to configure integrations for the same hyperscalers. For more information, see Create an AI connection for discovery.
  3. The Veza connector itself authenticates using OAuth 2.0 only. Configure OAuth in your Veza tenant. See Configure OAuth in Veza.
  4. Configure OAuth in the ServiceNow platform and link it to the pre-provided SN AI Security Veza Connector connection alias. See Configure OAuth for Veza in ServiceNow.
  5. Create the AI connection for Veza in Settings > Integrations > Connectors. See Create an AI connection for Veza access intelligence.

Once configured, select an AI asset in the agent map and view the Access intelligence tab to see risk score and other information. If your token has expired or you haven't yet authenticated, select Re-Authenticate on that tab. See Discover your agent network with the map.

Tip: If your AI asset appears in the agent map but doesn't have information shown in the Access intelligence tab, make sure that it's a governed asset with external_ref_id populated and model_category=Agentic AI.

  • Configure OAuth in Veza
    Create an OAuth 2.0 client and an OAuth 2.0 app in your Veza tenant so that AI Control Tower can authenticate to Veza using OAuth 2.0 instead of an API key.
  • Configure OAuth for Veza in ServiceNow
    Set up two application registries, their OAuth entity scopes and credentials, then link them to the pre-provided connection alias, so that AI Control Tower can authenticate to Veza using OAuth 2.0.

Parent Topic:Configuring security metrics in AI Control Tower

Keywords ServiceNow OttoAI Agentsgenerative AIagentic AI
Search documentation
Search document titles and file paths on the brazil branch