{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":6760,"path":"customer-service-management/granular-admin-roles.md","title":"Service Model Foundation Granular admin roles","bundle":null,"doc_type":null,"release":"australia","body":"\n# Service Model Foundation Granular admin roles\n\nGranular admin roles enable organizations to assign specific administrative permissions based on functional responsibilities, replacing broad admin access with targeted role assignments.\n\nThe following table describes the granular admin roles that the administrator can assign to the internal users.\n\n<table id=\"granular_admin_roles\"><thead><tr><th>\n\nRole name\n\n</th><th>\n\nDescription\n\n</th><th>\n\nInherited by\n\n</th><th>\n\nInherits\n\n</th></tr></thead><tbody><tr><td>\n\nsn\\_bus\\_loc.business\\_org\\_admin\n\n</td><td>\n\nProvides CRUD access to all Service Model Foundation tables\n\n</td><td>\n\nNo\n\n</td><td>\n\n-   sn\\_service\\_org.service\\_org\\_admin\n-   sn\\_bus\\_loc.ibl\\_writer\n-   sn\\_bus\\_loc.ebl\\_viewer\n-   sn\\_bus\\_loc.ibl\\_viewer\n-   sn\\_bus\\_loc.writer\n\n</td></tr><tr><td>\n\nsn\\_service\\_org.service\\_org\\_admin\n\n</td><td>\n\nProvides all CRUD access to organization core \\(formerly service organization\\) entities, which come under Service Model Foundation flows\n\n</td><td>\n\nsn\\_bus\\_loc.business\\_org\\_admin\n\n</td><td>\n\n-   sn\\_service\\_org.viewer\n-   sn\\_service\\_org.writer\n-   sn\\_service\\_org.service\\_org\\_delete\n-   sn\\_service\\_org.service\\_org\\_external\\_staff\\_create\n-   sn\\_service\\_org.service\\_org\\_external\\_staff\\_read\n-   sn\\_service\\_org.service\\_org\\_external\\_staff\\_write\n-   sn\\_service\\_org.service\\_org\\_external\\_staff\\_delete\n-   sn\\_service\\_org.service\\_org\\_assignment\\_group\\_create\n-   sn\\_service\\_org.service\\_org\\_assignment\\_group\\_read\n-   sn\\_service\\_org.service\\_org\\_assignment\\_group\\_write\n-   sn\\_service\\_org.service\\_org\\_assignment\\_group\\_delete\n-   sn\\_service\\_org.service\\_org\\_criteria\\_create\n-   sn\\_service\\_org.service\\_org\\_criteria\\_read\n-   sn\\_service\\_org.service\\_org\\_criteria\\_write\n-   sn\\_service\\_org.service\\_org\\_criteria\\_delete\n-   sn\\_service\\_org.service\\_org\\_customer\\_criteria\\_create\n-   sn\\_service\\_org.service\\_org\\_customer\\_criteria\\_read\n-   sn\\_service\\_org.service\\_org\\_customer\\_criteria\\_write\n-   sn\\_service\\_org.service\\_org\\_customer\\_criteria\\_delete\n-   sn\\_service\\_org.service\\_criteria\\_write\n-   sn\\_service\\_org.service\\_criteria\\_delete\n-   sn\\_service\\_org.service\\_criteria\\_read\n-   sn\\_service\\_org.service\\_criteria\\_create\n\n</td></tr><tr><td>\n\nsn\\_csm\\_ocs.csm\\_ocs\\_admin\n\n</td><td>\n\nProvide full CRUD access to Outsourced Customer Service flow\n\n</td><td>\n\nNo\n\n</td><td>\n\nsn\\_service\\_org.service\\_external\\_staff.create sn\\_service\\_org.service\\_external\\_staff.read sn\\_service\\_org.service\\_external\\_staff.write sn\\_service\\_org.service\\_external\\_staff.delete sn\\_contractor.outsourced\\_service\\_provider\\_create sn\\_contractor.outsourced\\_service\\_provider\\_read sn\\_contractor.outsourced\\_service\\_provider\\_write sn\\_contractor.outsourced\\_service\\_provider\\_delete sn\\_contractor.outsourced\\_service\\_provider\\_criteria\\_create sn\\_contractor.outsourced\\_service\\_provider\\_criteria\\_read sn\\_contractor.outsourced\\_service\\_provider\\_criteria\\_write sn\\_contractor.outsourced\\_service\\_provider\\_criteria\\_delete sn\\_csm\\_ocs.sn\\_csm\\_ocs\\_case\\_transfer\\_request\\_create sn\\_csm\\_ocs.sn\\_csm\\_ocs\\_case\\_transfer\\_request\\_read sn\\_csm\\_ocs.sn\\_csm\\_ocs\\_case\\_transfer\\_request\\_write sn\\_csm\\_ocs.sn\\_csm\\_ocs\\_case\\_transfer\\_request\\_delete\n\n</td></tr></tbody>\n</table>## Other granular admin roles for Service Model Foundation configuration\n\nThe following are the roles required to perform Service Model Foundation \\(SMF\\) configuration tasks:\n\n|Role name|Description|Plugin\\(s\\) required|\n|---------|-----------|--------------------|\n|sn\\_queryrules.admin|Provides admin access to all query rules.|com.snc.query\\_rules|\n|user\\_admin|Administers users, groups, locations, and companies.|None|\n|service\\_definition\\_admin|Provides full CRUD access to the service definition and related tables|None|\n|sn\\_crm\\_account\\_relationship\\_data\\_manager|Extends the sn\\_crm\\_account\\_data\\_manager role by granting additional admin access to account relationships.|cs\\_base|\n|sn\\_crm\\_consumer\\_relationship\\_data\\_manager|Extends the sn\\_crm\\_consumer\\_data\\_manager role by granting additional admin access to consumer relationships.|cs\\_base|\n|sn\\_crm\\_household\\_relationship\\_data\\_manager|Extends the sn\\_crm\\_household\\_data\\_manager role by granting additional admin access to household relationships.It also contains sn\\_crm\\_consumer\\_relationship\\_data\\_manager role.|com.snc.cs\\_base/if/com.snc.household/|\n\n"}}