SND Model-N-Flex Database system API

1.0.x
(0 reviews)
The system API is responsible for connecting with the Genentech - Model N Flex system database, which is part of the MP2C workstream. It connects with the RODB and RWDB to perform truncate, insert, and select query operations.

https://developer.roche.com# Overview

The External Partner API is a generic API which is suitable for getting relevant external partner information maintained in External Partner Portal.

Please note that this API includes:

  • 3 External Partner category types (Contractor, Consultant, Managed Service Provider)
  • Externals from Genentech (company codes 1000, 1010) and Roche Singapore Technical Operations (RSTO company code 3100)

The API is restricted to what is in scope for External Partner Portal today. The API cannot deliver externals from the list below:

Any externals from geographies other than Genentech and RSTO

Collaborators

Affiliated Persons (Chugai)

Roche Group Board of Directors

Interns (when not employees), apprentices, graduates

External Business Partners (ExBPs)

Getting Started

Before submitting any request, we kindly ask you to review our “Request Access” gSite page and the “Data Definitions” .

The process to request access to the External Partner API should start from the request form available in the ServiceNow End User Portal. Once the process is reviewed and your data groups are defined, you can submit your request via the “People & Culture Data Access - new request” form.

More details about the process in Mulesoft Anypoint Exchange is available via the Support page.

Note: All requests that did not start from the Service Now request form will be rejected.

Data privacy

The level of external Partner details requested is defined by the query parameter dataGroupIds. Each consuming application/client is expected to follow the on-boarding guidelines and select which data groups are needed for the consuming application. Data groups are split in 3 categories:

  1. Non Confidential
  2. Confidential by Roche
  3. Sensitive by Law or Roche

Accessing categories 2 and 3 will require an approval from the global or local DPOs and P&C core team. A SRA (System Risk Assessment) will be asked and will need to be completed before the Production go-live of your application integration. In case the SRA results in the necessity to create a DCR (Data Classification Report) or PIA (Privacy Impact Assessment) also these documents need to be completed for Production go-live The access to the Production environment won’t be approved without filling this prerequisite.

More information about data privacy related to this API is available in our “Data Privacy” gsite page.

Please also refer to the Information Commitments gSite when processing data.

Intended Use

The external Partner API enables solutions to retrieve external partner details from Service-now.

Through this API, consuming solutions can:

Get external Partner details for a given external.

Business Case

There are huge number of systems in Roche which need Externals data. A generic API was required to maintain and manage a uniform integration method between P&C systems and consuming applications.

Reviews