{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":18062,"path":"governance-risk-compliance/privacy-workspace/roles-installed-prm.md","title":null,"bundle":null,"doc_type":null,"release":null,"body":"---\ntitle: Roles installed with Privacy Management\ndescription: The GRC: Privacy Management application installs the roles for the privacy analyst, the privacy manager, and the privacy administrator to perform their respective tasks.\nlocale: en-US\ncanonical_url: https://www.servicenow.com/docs/r/australia/governance-risk-compliance/privacy-workspace/roles-installed-prm.html\nrelease: australia\nproduct: Privacy Workspace\nclassification: privacy-workspace\ntopic_type: reference\nlast_updated: \"2026-09-10\"\nreading_time_minutes: 3\nbreadcrumb: [Reference, Privacy Management, Governance, Risk, and Compliance]\n---\n\n# Roles installed with Privacy Management\n\nThe GRC: Privacy Management application installs the roles for the privacy analyst, the privacy manager, and the privacy administrator to perform their respective tasks.\n\n<table id=\"table_m2t_czq_mqb\"><thead><tr><th>\n\nRole title \\[name\\]\n\n</th><th>\n\nDescription\n\n</th><th>\n\nContains roles\n\n</th></tr></thead><tbody><tr><td>\n\nPrivacy Analyst\\[sn\\_privacy.analyst\\]\n\n</td><td>\n\nPrivacy analysts are responsible for managing the privacy compliance posture of the processing activities owned by them.​ They perform the following tasks:-   Assess the processing activities regularly by sending and reviewing privacy impact assessments​.\n-   Work with the management and business users to identify and manage controls related to a processing activity​.\n-   Manage and resolve the concerns of business users about compliance-related issues and policy exceptions​.\n-   Test and monitor control effectiveness​.\n\n ​\n\n</td><td>\n\n-   sn\\_grc\\_workspace.task\\_reader\n-   sn\\_compliance.policy\\_user\n-   sn\\_compliance.library\\_user\n-   sn\\_compliance.control\\_framework\\_user\n-   sn\\_smart\\_asmt.template\\_reader\n-   sn\\_privacy.business\\_user\n-   sn\\_risk.implementation\\_user\n-   sn\\_risk.library\\_user\n-   sn\\_privacy\\_case.privacy\\_case\\_analyst\n\n If the sn\\_risk\\_advanced plugin is active:\n\n -   sn\\_risk\\_advanced.ara\\_approver\n-   sn\\_risk\\_advanced.ara\\_assessor\n\n If the sn\\_prm\\_gen\\_ai plugin is active: sn\\_reco\\_template.rationalization\\_process\\_writer\n\n If the sn\\_reg\\_body\\_mgmt plugin is active: sn\\_reg\\_body\\_mgmt.reader\n\n If the sn\\_smart\\_asmt plugin is active: sn\\_smart\\_asmt.assessment\\_reader\n\n</td></tr><tr><td>\n\nPrivacy Manager\\[sn\\_privacy.manager\\]\n\n</td><td>\n\nPrivacy managers are responsible for managing the overall organization level privacy compliance posture.​ They perform the following tasks:-   Develop and implement privacy regulations, authority documents,​ and policies.\n-   Review privacy regulatory requirements and policies​.\n-   Design and monitor controls to deal with violations of privacy regulations and internal policies.​\n-   Plan privacy programs and scope entities.\n-   Create privacy impact assessment templates.​\n-   Continuously monitor control effectiveness and recommend effective improvements.\n-   ​ Supervise the privacy compliance team.​\n-   Report to management and the Board of Directors on compliance posture​.\n-   Discover who is implementing privacy regulation for the first time in their organization.\n\n</td><td>\n\n-   sn\\_privacy.analyst\n-   sn\\_grc\\_workspace.task\\_admin\n-   sn\\_compliance.attestation\\_creator\n-   sn\\_privacy\\_case.privacy\\_case\\_manager\n-   sn\\_compliance.control\\_framework\\_manager\n-   sn\\_compliance.library\\_manager\n-   sn\\_compliance.policy\\_manager\n-   sn\\_risk.implementation\\_manager\n-   sn\\_risk.library\\_manager\n-   sn\\_smart\\_asmt.template\\_contributor\n-   sn\\_smart\\_asmt.template\\_manager\n\n If the sn\\_grc\\_pdr plugin is active: sn\\_grc\\_pdr.pdr\\_manager\n\n If the sn\\_privacy\\_content plugin is active: sn\\_esg\\_content.admin\n\n If the sn\\_prm\\_gen\\_ai plugin is active: sn\\_smart\\_imp\\_auto.automation\\_reader\n\n If the sn\\_grc\\_reg\\_change plugin is active: sn\\_grc\\_reg\\_change.manager\n\n If the sn\\_grc\\_ent\\_access plugin is active: sn\\_grc\\_ent\\_access.reader\n\n If the sn\\_reg\\_body\\_mgmt plugin is active: sn\\_reg\\_body\\_mgmt.writer\n\n If the sn\\_smart\\_asmt plugin is active: sn\\_smart\\_imp\\_auto.automation\\_reader\n\n</td></tr><tr><td>\n\nPrivacy Admin\\[sn\\_privacy.admin\\]\n\n</td><td>\n\nPrivacy administrators administer the privacy policy and compliance management. ​ Users assigned this role are responsible for configuring privacy management solutions as per the privacy team's requirements.​ They perform the following tasks:-   Configure privacy impact assessments and automated flows to trigger assessments​\n-   Configure rules to auto-create processing activities ​out of privacy screening assessments.\n-   Monitor the ServiceNow AI Platform dependencies with other applications and modules.\n-   Can read the scripts under Processing activity script configurations related list.\n\n​\n\n</td><td>\n\n-   sn\\_privacy.manager\n-   sn\\_risk\\_advanced.ara\\_admin\n-   sn\\_privacy\\_case.privacy\\_case\\_admin\n-   sn\\_compliance.control\\_framework\\_admin\n-   sn\\_compliance.library\\_admin\n-   sn\\_compliance.policy\\_admin\n-   sn\\_grc\\_workspace.assessment\\_template\\_configuration\\_writer\n-   sn\\_smart\\_asmt.assessment\\_admin\n\n If the sn\\_grc\\_pdr plugin is active: sn\\_grc\\_pdr.pdr\\_admin\n\n If the sn\\_grc\\_ent\\_access plugin is active:\n\n -   sn\\_grc\\_ent\\_access.admin\n-   sn\\_grc\\_ent\\_access.bulk\\_access\\_config\\_admin\n\n If the sn\\_smart\\_asmt plugin is active: sn\\_smart\\_imp\\_auto.automation\\_creator\n\n</td></tr><tr><td>\n\nPrivacy assessment responder \\[sn\\_privacy.assessment\\_responder\\]\n\n</td><td>\n\nPrivacy assessment responders can respond to the privacy assessments as key stakeholders. They can also raise privacy requests from the portal.\n\n</td><td>\n\n-   sn\\_grc\\_workspace.task\\_reader\n-   canvas\\_user\n-   sn\\_grc\\_workspace.assessment\\_template\\_configuration\\_reader\n-   sn\\_grc\\_workspace.user\n\n If the sn\\_smart\\_asmt plugin is active: sn\\_smart\\_asmt.actor\n\n</td></tr><tr><td>\n\nPrivacy business user \\[sn\\_privacy.business\\_user\\]\n\n</td><td>\n\nPrivacy business users can edit the assigned processing activities in the [Discover state](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/privacy-workspace/stages-pa.md), and also respond to the assessments.\n\n</td><td>\n\n-   sn\\_grc\\_workspace.task\\_reader\n-   canvas\\_user\n-   sn\\_privacy\\_case.privacy\\_case\\_business\\_user\n-   sn\\_compliance.control\\_framework\\_business\\_user\n-   sn\\_compliance.library\\_business\\_user\n-   sn\\_compliance.policy\\_business\\_user\n-   sn\\_grc\\_workspace.assessment\\_template\\_configuration\\_reader\n-   sn\\_grc\\_workspace.user\n-   sn\\_risk.implementation\\_business\\_user\n-   sn\\_smart\\_asmt.actor\n-   sn\\_smart\\_asmt.assessment\\_reader\n\n If the sn\\_risk\\_advanced plugin is active: sn\\_risk\\_advanced.ara\\_reader\n\n</td></tr><tr><td>\n\nPrivacy developer \\[sn\\_privacy.developer\\]\n\n</td><td>\n\nPrivacy developers can write custom scripts\n\n</td><td>\n\n-   sn\\_privacy.admin\n-   sn\\_compliance.compliance\\_shared\\_developer\n-   sn\\_grc.grc\\_shared\\_developer\n\n</td></tr><tr><td class=\"sub-head\" colspan=\"3\">\n\nIf the Privacy Employee User application is installed, then the following roles are available.\n\n</td></tr><tr><td>\n\nPrivacy employee user \\[sn\\_privacy\\_emp.privacy\\_employee\\]\n\n</td><td>\n\nEnables your employees to perform the following operations from the Employee Center: -   Proactively request privacy impact assessments \\(PIAs\\) for new implementations, applications, and processes from the Employee Center.\n-   Report privacy cases related to data privacy policy and regulatory violations.\n-   Read and acknowledge organizational privacy policies\n-   Create policy exceptions.\n-   Create privacy issues.\n\n</td><td>\n\n-   sn\\_grc.issue\\_employee\\_user\n-   sn\\_compliance.policy\\_ack\\_employee\\_user\n-   sn\\_compliance.policy\\_exception\\_employee\\_user\n\n</td></tr><tr><td class=\"sub-head\" colspan=\"3\">\n\nIf the GRC: Privacy Lite User application is installed, then the following roles are considered as lite operators.\n\n</td></tr><tr><td>\n\n-   sn\\_privacy.assessment\\_responder\n-   sn\\_privacy\\_case.privacy\\_case\\_business\\_user\n-   sn\\_privacy.business\\_user\n-   sn\\_grc\\_pdr.data\\_owner\\_admin\n\n</td><td>\n\nUsers with the lite operator role can do the following:\n\n -   Respond to privacy assessment tasks as business users.\n-   Work on the processing activity as a business user when it’s assigned to you to collect the required details.\n-   Respond to the processing activity's criticality risk assessments and object-based assessment.\n-   Respond to the detailed privacy risk assessments on each risk identified on a processing activity.\n-   Work on breach assessments and other privacy case tasks.\n-   Respond to the assessment and investigation tasks assigned by the privacy team.\n-   Work on personal data rights action tasks to handle data according to the requester's requests.\n-   Respond to the assigned control attestations.\n-   View, update, and close assigned issues.\n-   Create, update, and close assigned remediation tasks.\n-   Respond to the assigned manual indicator tasks.\n\n</td><td>\n\n \n\n</td></tr></tbody>\n</table>**Parent Topic:**[Privacy Management reference](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/privacy-workspace/privacy-mgmt-reference.md)\n\n"}}