Components installed with Microsoft Endpoint Configuration Manager for Investigation

reference brazil Updated Sep 10, 2026 2 min read components-installed-mecm-adapter.md
Raw file servicenow.com

Several types of components are installed with activation of the Microsoft Endpoint Configuration Manager for Investigation (sn_mecm_adapter) application, including user roles and ServiceNow Store applications.

Note: The Application Files table lists the components that are installed with this application. For instructions on how to access this table, see Find components installed with an application.

Demo data is available for this feature.

Roles installed

Role title [name]

Description

Contains roles

Metrics user[sn_cimaf.sn_cimaf_read]

Enables users to access and perform basic operations in the Metrics Collector Framework such as view metric definition.

None

Metrics admin[sn_cimaf.sn_cimaf_admin]

Enables users to install the application, add, configure the tables, and also view the metric definition.

[sn_cimaf.sn_cimaf_read]

Investigate Framework Admin[sn_invest_fwk.sn_investigate_admin]

Enables users to install the Investigation Framework application and manage the Investigate Framework modules.

[sn_cimaf.sn_cimaf_admin]

## Tables installed

Table

Description

Adapter Configuration[sn_mecm_adapter_config]

List of configurations for the MECM adapter.

Action Configuration[sn_mecm_action_config]

List of action configurations applicable to CI.

**Note:** Deny unless ACLs are added to all the tables. The Deny unless ACLs restrict access for a non-authenticated user, such as a public role user. Without access, the user can't perform any actions on the tables related to the mentioned applications, such as reading, writing, deleting, creating, or accessing the report view. For more information on Deny-Unless ACLs and enhanced security model adoption features, see [Deny-Unless ACL](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/acl-denial-behavior.md) and [Enhanced security model features for incident tables](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/it-service-management/incident-management/comp-instal-itsm-enhanced-sec-features.md).

Store applications installed

Store application

Description

Metrics and CI Actions Framework [sn_cimaf]

Core framework capabilities and configurations for Microsoft Endpoint Configuration Manager for Investigation application, including API data and CI actions framework. For more information on the roles and tables installed, see Components installed with Metrics and CI Actions Framework.

Investigation Framework [sn_invest_fwk]

Framework to analyze the affected CIs using the metrics information.

Remedial Actions Framework[com.snc.sn_reacf]

Framework to remediate or resolve the CI related issues. For more information on the roles and tables installed, see Components installed with Remedial Actions Framework.

**Parent Topic:**[Incident Management in Service Operations Workspace reference](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/it-service-management/service-operations-workspace/sow-im-reference.md)
Search documentation
Search document titles and file paths on the brazil branch