{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":40328,"path":"platform-security/access-control/remove-conditional-script-writer-users.md","title":"Remove users from the Conditional Script Writer group","bundle":null,"doc_type":null,"release":"australia","body":"\n# Remove users from the Conditional Script Writer group\n\nUse the Manage scripting access to manually add or remove users from the **Conditional Script Writer** group to control who has scripting access.\n\n## Before you begin\n\nRole required: security\\_admin\n\n**Important:**\n\n-   You must have elevate your role `security_admin`. See [Elevate to a privileged role](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/t_ElevateToAPrivilegedRole.md).\n-   Until auto-assignment is turned off, a background job continues adding existing and new users to the **Conditional Script Writer** group, which assigns the `snc_required_script_writer_permission` role. It is recommended that you deactivate auto-assignment and manage the removal process to confirm only users with a legitimate scripting need remain in the group.\n\n## Procedure\n\n1.  Navigate to **All** > **System Security** > **Scripting Governance Tool**.\n\n2.  Select **Manage scripting access**.\n\n3.  Add the users who should retain scripting access in the **Users to keep in the conditional script writers group** field.\n\n    Only users added to this field are retained in the group after the removal job runs. All other group members are removed. Search and select users by name.\n\n    \\[Omitted image \"sgt-manage-user.png\"\\] Alt text: Manage users\n\n4.  Select **Next**.\n\n    The Manage users in the conditional script writer group page opens with the **Keep list** card displays the number of users retained, and the **Keep in the conditional script writer group** table lists the users you selected.\n\n5.  Review the keep list to confirm it is correct, then select **Schedule removal**.\n\n    \\[Omitted image \"sgt-schedule-removal.png\"\\] Alt text: Schedule removal\n\n    The **Schedule removal** dialog opens and displays a summary of the pending changes:\n\n6.  Select when the removal job should run in the **Start processing** field:\n\n    The following options are available:\n\n    -   Immediately — runs the removal job as soon as you confirm.\n    -   In 1 hour\n    -   In 2 hours\n    -   In 3 hours\n    -   In 5 hours\n    -   In 8 hours\n    -   In 13 hours\n7.  Select **Confirm** to schedule the removal.\n\n    A banner confirms that the `Conditional script writer group member removal job is running or scheduled`. The removal job removes all users not on the keep list from the **Conditional Script Writer** group and disables auto-assignment.\n\n\n## Result\n\nUsers not included in the keep list are removed from the **Conditional Script Writer** group at the scheduled time and lose the `snc_required_script_writer_permission` role. Removal does not affect any other permissions those users hold on the instance. Auto-assignment is also disabled, preventing the background job from re-adding users to the group automatically.\n\n## What to do next\n\nAfter the removal job completes, verify the outcome using the **View removals** section at the bottom of the Scripting Governance Tool dashboard.\n\n"}}