Module Implementation Playbook — سيناريوهات التنفيذ الكاملة
اقرأ أولاً: ../MASTER_ALL_IN_ONE_SUMMARY.md · ../html/MASTER_ALL_IN_ONE_SUMMARY.html
الدليل الشامل: ../MASTER_ALL_IN_ONE.md · ../html/MASTER_ALL_IN_ONE.html
ممارسة الشاشات: ../html/MASTER_PRACTICE_GUIDE_ALL_TOPICS.html
Australia · Scopex_786686_hr_leave
Platform target: ServiceNow Australia (Sep 2026) · next EA: Brazil
URLs: ../../SERVICENOW_DIRECT_URLS_CATALOG.md · 1-week: ../../SERVICENOW_ONE_WEEK_STUDY_DEPLOY_AUSTRALIA.md
HR Leave: Scope x_786686_hr_leaveMaster reference for all modules in modules/.
Each module .md file has §14 with module-specific summary + link here.
Hub: 00_TUTORIAL_OPTIONS_REFERENCE.md · MODULE_OPTIONS_AND_INSTANCE_NOTES.md
هذا الملف = دليل استشاري: سيناريوهات، خيارات، بلجنز، أدوار، وماذا يُطوَّر عادةً.
ملخص ووصف بالعربية (Arabic Summary)
| البند | الشرح |
|---|---|
| ما هو هذا الملف؟ | دليل تنفيذ موحّد — سيناريوهات S1/S2/S3 لكل موديول |
| لماذا مهم؟ | يكمّل §14 في كل موديول بخيارات A/B وتفاصيل بلجنز وأدوار |
| من يستخدمه؟ | مستشار ServiceNow، قائد تنفيذ، مطوّر |
| ماذا يغطي؟ | ITSM، CMDB، ITOM، ITAM، HRSD، CSM، FSM، SPM، GRC — أقسام منفصلة |
ملخص في سطر: Playbook التنفيذ — ماذا تبني في كل سيناريو (صغير / متوسط / مؤسسي).
وصف مختصر: جداول Plugins، Roles، تطويرات شائعة، Go-live checklist لكل موديول. اقرأه مع §14 و§15 في الملف المخصص.
How to use
| Step | Action |
|---|---|
| 1 | Activate plugins (§3 in module file + §14.3 here) |
| 2 | Pick implementation scenario (§14.1) |
| 3 | Choose options (§14.2) — document A/B/C in workshop |
| 4 | Configure roles/groups (§14.4) |
| 5 | Build customizations (§14.5) in scoped app |
| 6 | Go-live checklist (§14.7) |
ITSM — IT Service Management
ITSM — Scenarios
| Scenario | Scope | Timeline |
|---|---|---|
| S1 — Incident + Catalog only | PDI / small org | 1–2 weeks |
| S2 — Full ITIL | Incident, Problem, Change, SLA, KB | 4–8 weeks |
| S3 — Enterprise | S1+S2 + SOW, Major Incident, PA, integrations | 3–6 months |
S2 step-by-step (most common)
Workshop (process + OOTB vs custom)
→ Activate Change + Problem plugins
→ Guided Setup ITSM
→ Users/Groups/Roles (itil, change_manager, knowledge)
→ CMDB baseline CIs
→ Assignment Rules + Priority matrix
→ SLA Definitions (P1–P4)
→ Catalog categories + items + flows
→ Change models + CAB + Flow approvals
→ Notifications / events
→ SP + Employee Center + SOW
→ Reports + UAT + Update Sets
ITSM — Options matrix
| Area | Option A (recommended) | Option B | Option C |
|---|---|---|---|
| Approvals | Flow Designer | Workflow (legacy) | Email only |
| Assignment | Assignment Rules | Data Lookup | BR script |
| Priority | Impact × Urgency table | Manual | BR hardcode |
| Agent UI | Service Operations Workspace | Classic lists | Mixed |
| End user | Employee Center /esc | Service Portal /sp | Email-in only |
| CMDB link | CI on incident/change | Optional | Full Discovery |
ITSM — Plugins (activation order)
| Order | Plugin / App | ID / search | Required? |
|---|---|---|---|
| 1 | Incident | core | Yes |
| 2 | Change Management | com.snc.change_management | S2+ |
| 3 | Problem Management | com.snc.problem | S2+ |
| 4 | SLA | core / SLM | S2+ |
| 5 | Knowledge | core | Optional |
| 6 | ITSM BP packs | Store | Optional demo |
| 7 | Now Assist ITSM | Store | Optional |
Navigate: Plugins → Activate → Guided Setup > ITSM
ITSM — Roles & groups (customize)
| Role | Assign to | Customization |
|---|---|---|
| itil | Service desk group | Base agent |
| itil_admin | Team leads | |
| sn_change_write | Change implementers | |
| change_manager | CAB | |
| knowledge_admin | KB owners | |
| catalog_admin | Catalog team | |
| Scoped roles | Your app only | e.g. x_*_app.user |
Groups: Create per tier (L1/L2), per technology, per region — assign roles to groups.
ITSM — Common developments
| Artifact | Purpose |
|---|---|
| Scoped app | Custom fields on task tables via extension |
| Business Rules | Auto-priority, notifications (prefer Assignment Rules) |
| Flow Designer | Change CAB, catalog fulfillment |
| UI Policies / Client Scripts | Form behavior |
| Scripted REST | External ticketing integration |
| Import Sets | Bulk users/CIs |
| Service Catalog variables | Hardware/software request |
| Dashboards / PA | KPIs, backlog, SLA breach |
ITSM — Best practice choices
- Use Change Models (Normal/Standard/Emergency) not one-size change.
- Standard Change = pre-approved template, no CAB.
- Never put assignment logic in BR if Assignment Rule can do it.
- Always link cmdb_ci on incidents for impact reporting.
- Test SLA stop conditions (Resolved state).
CMDB — Configuration Management
CMDB — Scenarios
| Scenario | When |
|---|---|
| S1 — Manual CMDB | No Discovery license |
| S2 — Discovery-led | ITOM licensed |
| S3 — CSDM + Multisource | Enterprise service mapping |
CMDB — Options matrix
| Area | Option A | Option B |
|---|---|---|
| Populate | Discovery (MID) | Import Set + Transform |
| Identity | IRE rules | Coalesce on import only |
| Services | Service Mapping | Manual Application Service |
| Health | CMDB Health Dashboard | Spreadsheets |
| Model | CSDM 4 domains | Ad-hoc classes |
CMDB — Plugins
| Plugin | ID |
|---|---|
| CMDB | core |
| Discovery | com.snc.discovery |
| Service Mapping | com.snc.service-mapping |
| CSDM Foundations | Store |
CMDB — Roles
cmdb_admin, discovery_admin, service_mapping_admin, data owners per class.
CMDB — Common developments
IRE identification/reconciliation rules, Transform Maps, CI Class Manager attributes, relationship rules, CMDB Health remediation flows, IntegrationHub to external CMDB.
CMDB — Best practices
Define authoritative source per CI class; never duplicate CIs; run Health before go-live.
ITOM — IT Operations Management
ITOM — Scenarios
| Scenario | When |
|---|---|
| S1 — MID + Discovery | On-prem infra |
| S2 — + Event Management | Monitoring integration |
| S3 — + Service Mapping + Cloud | Full ITOM |
ITOM — Options matrix
| Area | Option A | Option B |
|---|---|---|
| Discovery | Scheduled IP ranges | Event-driven |
| Credentials | Per OS type | Credentialless (limited) |
| Events | Connectors (Splunk) | Email-to-event |
| Cloud | AWS/Azure plugins | Manual cloud CIs |
CMDB — Plugins
com.snc.discovery, com.snc.service-mapping, com.snc.sa.server (events), cloud plugins.
ITOM — Roles
discovery_admin, evt_mgmt_admin, service_mapping_admin, cmdb_admin.
ITOM — Common developments
Pattern Designer patterns, event correlation rules, alert→incident BR/Flow, MID clusters per zone.
ITAM — IT Asset Management
ITAM — Scenarios
| Scenario | When |
|---|---|
| S1 — HAM only | Laptops/desktops lifecycle |
| S2 — HAM + Procurement | Catalog → PO → asset |
| S3 — + SAM | License compliance |
ITAM — Options matrix
| Area | Option A | Option B |
|---|---|---|
| Request | Service Catalog | Direct PO |
| CI link | Serial match | Manual |
| SAM data | SCCM connector | Spreadsheet import |
ITAM — Plugins (order)
com.snc.asset_management → com.snc.hardware_asset_management → com.snc.procurement → SAM (Store).
ITAM — Roles
ham_admin, sam_admin, procurement_admin, stockroom_admin, asset.
ITAM — Common developments
Catalog→procurement flows, stockroom transfers, retire workflows, ERP integration REST, barcode.
HRSD — HR Service Delivery
HRSD — Scenarios
| Scenario | When |
|---|---|
| S1 — HR Cases + EC | Employee services |
| S2 — + Lifecycle Events | Onboarding/offboarding |
| S3 — + Workday spoke | HRIS integration |
HRSD — Options matrix
| Area | Option A | Option B |
|---|---|---|
| Security | HR Criteria (mandatory) | ACL only (weak) |
| Portal | Employee Center | Legacy /hr |
| Cases | COE-based | Single case table |
HRSD — Plugins
com.sn_hr_core, com.sn_hr_case_management, Lifecycle Events, COE plugins, EC Pro.
HRSD — Roles
sn_hr_core.basic, case_writer, manager, admin, COE-specific roles.
HRSD — Common developments
HR Profiles, HR Criteria first, Lifecycle Activity Sets, scoped apps (e.g. Leave), IntegrationHub HR spokes.
Link: ../09_MODULES_AND_INTEGRATION.md for HR Leave app.
CSM — Customer Service Management
CSM — Scenarios
| Scenario | When |
|---|---|
| S1 — B2C cases | Consumer support |
| S2 — B2B + Accounts | Entitlements |
| S3 — + FSM | Field service |
CSM — Options
Entitlements vs roles, AWA routing, CSM Workspace, Service Portal /csm.
CSM — Plugins
CSM core, Advanced Fulfillment, Entitlement Management (licensed).
CSM — Roles
sn_customerservice.agent, manager, entitlement admins.
CSM — Common developments
Account/contact model, entitlement scripts, case types, portal branding, SLA per contract.
FSM — Field Service Management
FSM — Scenarios
| Scenario | When |
|---|---|
| S1 — Work Orders | Dispatch technicians |
| S2 — + Parts | Stockrooms |
| S3 — CSM integration | Case → WO |
FSM — Options
Dispatcher Workspace vs classic, mobile offline, territories/skills scheduling.
FSM — Plugins
com.snc.field_service_management, scheduling plugins.
FSM — Roles
sn_fsm_dispatcher, technician, inventory_admin.
FSM — Common developments
Work order tasks, agent maps, parts consumption, asset-linked service.
SPM — Strategic Portfolio Management
SPM — Scenarios
| Scenario | When |
|---|---|
| S1 — Demand only | Intake ideas |
| S2 — PPM | Projects + resources |
| S3 — Agile + SAFe | PI planning |
SPM — Options
Demand vs Project, Resource Management plugin, Agile boards, financial planning.
SPM — Plugins
SPM/PPM apps from Store, Agile Development, Resource Management.
SPM — Roles
Portfolio manager, project manager, resource manager, team member.
SPM — Common developments
Demand workflow, project templates, resource plans, timecards, integration to Jira.
GRC / IRM — Governance, Risk, Compliance
GRC — Scenarios
| Scenario | When |
|---|---|
| S1 — Policy & Compliance | Controls library |
| S2 — Risk | Risk register |
| S3 — Audit engagements | Full GRC |
GRC — Options
Profiles for scoping, Authority Documents, Continuous Control Monitoring indicators.
GRC — Plugins
GRC/IRM suite from Store, Risk Management, Audit Management.
GRC — Roles
GRC admin, risk manager, compliance officer, auditor.
GRC — Common developments
Profile per business unit, control tests, attestation campaigns, risk remediation tasks.
Cross-module integration matrix
| From → To | Pattern |
|---|---|
| ITSM → CMDB | CI on incident/change |
| ITOM → CMDB | Discovery populates CIs |
| ITAM → CMDB | Asset-CI link |
| HRSD → ITSM | Separate — use HR Case not incident |
| CSM → FSM | Case creates WO |
| Catalog → ITAM | Request → PO → asset |
| Any → External | REST / IntegrationHub / Import |
Universal go-live checklist
- [ ] Plugins active, Guided Setup complete
- [ ] Roles on groups, Impersonate tested
- [ ] Scenario documented (S1/S2/S3)
- [ ] Options A/B/C recorded in workshop notes
- [ ] Customizations in scoped app / Update Set
- [ ] Integrations tested (Explorer inbound / REST Message outbound)
- [ ] Training + hypercare plan
SecOps — Security Operations (NEW)
SecOps — Scenarios
| Scenario | When |
|---|---|
| S1 — SIR baseline | SOC starting point, SIEM → ServiceNow |
| S2 — + VR | Vulnerability management lifecycle |
| S3 — Enterprise SecOps | SIR + VR + TI + CTD + automation |
SecOps — Options
| Area | Option A | Option B |
|---|---|---|
| SIEM ingestion | Webhook → Scripted REST | Splunk Spoke (IH) |
| EDR | CrowdStrike connector | Carbon Black / Defender |
| Scanner | Qualys IH Spoke | Tenable / Rapid7 |
| Threat feeds | OTX (free) | Recorded Future (premium) |
| Workspace | /now/sir/agent (Zurich) | Classic SIR navigation |
SecOps — Plugins
com.snc.threat, com.snc.security_incident, com.snc.vulnerability, com.snc.threat.intel, com.snc.sn_vul_config_test
SecOps — Roles
sn_si.analyst, sn_si.manager, sn_vul.analyst, sn_ti.read
SecOps — Common developments
MITRE ATT&CK tagging, IoC enrichment scripts, playbooks (PAD), automated containment (host isolate, user disable, IP block), prioritization scoring formulas, bulk-VI to bulk-Change.
Deep: SECOPS.md
DevOps — DevOps Change Velocity (NEW)
DevOps — Scenarios
| Scenario | When |
|---|---|
| S1 — Tool-only | Visibility from Git/Jenkins to SN |
| S2 — Change Velocity | Automated CR creation from pipelines |
| S3 — Full Now Pipelines | End-to-end DevOps lifecycle in SN |
DevOps — Options
| Area | Option A | Option B |
|---|---|---|
| Source control | GitHub / GitLab Spoke | Git Studio (built-in) |
| CI | Jenkins | Azure DevOps / Bitbucket |
| Change automation | DevOps Change Velocity | Manual change with API |
| Pipeline | Now Pipelines | External (Jenkins / Argo) |
| Telemetry | DORA metrics | Manual KPIs |
DevOps — Plugins
com.snc.devops_config, com.snc.devops_change, com.snc.devops_pipeline
DevOps — Roles
sn_devops.admin, sn_devops.user, change manager
DevOps — Common developments
Pipeline connectors, automated CR creation, deployment risk scoring, DORA metrics dashboards, rollback automations.
Deep: DEVOPS.md
App Engine — Low-code (NEW)
App Engine — Scenarios
| Scenario | When |
|---|---|
| S1 — Personal apps | Individual productivity |
| S2 — Department apps | 10–50 user apps |
| S3 — Enterprise low-code | CoE + citizen + pro devs |
App Engine — Options
| Area | Option A | Option B |
|---|---|---|
| Builder | App Engine Studio (AES) | Direct studio.do |
| Workflow | Workflow Studio | Legacy Flow Designer |
| UI for end users | Mobile + Portal | Workspace |
| AI assist | Now Assist for Creators | Manual |
| Sharing | Application Repository | Update Set distribution |
App Engine — Plugins
com.glide.app_engine_studio, com.glide.process_automation, com.glide.mobile_studio, com.glide.ui_builder, com.glide.now_assist_creator
App Engine — Roles
app_engine_creator, app_engine_user, flow_designer, CoE admins
App Engine — Common developments
Custom tables (small), Workflow Studio flows, mobile applets, Service Portal Configurator pages, decision tables, custom actions, Macroponents.
Deep: APP_ENGINE.md
AI / Now Assist — Cross-module
AI — Scenarios
| Scenario | When |
|---|---|
| S1 — Now Assist on existing modules | Out-of-box AI on ITSM/HRSD/CSM |
| S2 — Custom Skills | Domain-specific generation |
| S3 — AI Agents + BYO LLM | Autonomous agents, RAG, LLM choice |
AI — Plugins
com.glide.now_assist, com.glide.ai_agent_studio, com.glide.ai_search
AI — Roles
now_assist_admin, ai_agent_builder, llm_connector_admin
Deep: ../14_AI_SERVICENOW_AGENTS.md
Cross-module integration matrix (expanded)
| From → To | Pattern |
|---|---|
| ITSM → CMDB | CI on incident/change |
| ITOM → CMDB | Discovery populates CIs |
| ITAM → CMDB | Asset-CI link |
| HRSD → ITSM | Separate — use HR Case not incident |
| CSM → FSM | Case creates WO |
| Catalog → ITAM | Request → PO → asset |
| SecOps SIR → CMDB | Affected CIs (sn_si_m2m_ci_incident) |
| SecOps SIR → ITSM | Auto-create Change for patches |
| SecOps VR → ITSM | Vulnerability → Change |
| DevOps → ITSM | Pipeline → CR auto-created |
| GRC → ITSM | Issue → Task remediation |
| GRC → CMDB | Profile maps to CIs |
| AI Agent → Any | Tools call any table API |
| App Engine app → SP/Workspace | Embedded experiences |
Universal go-live checklist (expanded)
- [ ] Plugins active, Guided Setup complete
- [ ] Roles on groups, Impersonate tested
- [ ] Scenario documented (S1/S2/S3)
- [ ] Options A/B/C recorded in workshop notes
- [ ] Customizations in scoped app / Update Set
- [ ] Integrations tested (inbound + outbound)
- [ ] AI features tested (Now Assist where applicable)
- [ ] Mobile app tested (where applicable)
- [ ] ATF coverage > 50% on critical flows
- [ ] Security review (ISC scan, ACL audit)
- [ ] Performance load test on largest table
- [ ] Backup + DR plan validated
- [ ] Training material AR + EN
- [ ] UAT sign-off (15+ scenarios)
- [ ] Hypercare plan (72h war-room + 30-day daily review)
- [ ] Post-go-live retrospective scheduled (Day 30)
Implementation methodology — 8-Phase Consulting Model
| Phase | Days (typical) | Output |
|---|---|---|
| 1. Discover | 5–10 | Stakeholder map, current state, scope statement |
| 2. Define | 5–10 | Process flows, scenarios picked, options doc |
| 3. Design | 10–20 | Data model, security model, UX wireframes, integrations |
| 4. Develop | 20–40 | Configuration, scripts, ATF, integration build |
| 5. Test | 10–15 | SIT, UAT, performance, security |
| 6. Train | 5–10 | Role-based training, KB, videos |
| 7. Deploy | 3–7 | Update Set propagation, cutover plan, go-live |
| 8. Stabilize | 30–60 | Hypercare, defect fixes, optimization |
Each phase has gate criteria with named approvers.
RAID log template (Risks, Assumptions, Issues, Dependencies)
| Type | Description | Owner | Mitigation | Status |
|---|---|---|---|---|
| Risk | Discovery may discover 2× expected CIs | Architect | Pre-flight sample run | Open |
| Assumption | Workday API will be ready by Day 10 | PM | Confirm with HRIS team | Confirmed |
| Issue | Test SLA not pausing on resolve | BA | Update workflow conditions | In-progress |
| Dependency | LDAP service account from IT Sec | Architect | Ticket raised | Pending |
Communication plan (T-30 → T+30)
| Audience | T-30 | T-7 | T-1 | Day 1 | Day 7 | Day 30 |
|---|---|---|---|---|---|---|
| Executives | Kickoff brief | Status | Final readiness | Launch confirm | KPI check | Outcomes report |
| End users | Awareness email | Training invite | Reminder | Login link + how-to | Office hours | Survey |
| IT Ops | Tech briefing | Cutover dry-run | War-room invite | Standby | Daily check | Steady-state |
| Support team | Training | Runbook review | On-call sched | Active support | Issue triage | Knowledge handoff |