{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":41199,"path":"platform-security/granular-admin-roles.md","title":"Granular admin roles","bundle":null,"doc_type":null,"release":"australia","body":"\n# Granular admin roles\n\nGranular admin roles enables you to verify proper access management by assigning roles that define user permissions and responsibilities. By doing so, organizations can maintain security, enforce conformance, and optimize their operations effectively.\n\nRoles are a fundamental part of managing access and maintaining security within your instance. They define what you can see and do, verifying that you have the appropriate level of access based on your responsibilities. By assigning the correct roles to the users, organizations can safeguard sensitive data, enforce conformance, and streamline operations.\n\nTo optimize access management within the ServiceNow AI Platform, consider adopting granular admin roles. This approach enables you to assign specific permissions to developers or users who perform minor administrative tasks, without granting them unrestricted access to the full admin role.\n\n**Note:**\n\n- Users who are assigned with admin role previously will have its granular admin roles assigned based on the product or module that they had access to earlier.\n- Each product within the ServiceNow AI Platform has its own set of granular admin roles. To determine the appropriate roles for your administrators or developers, refer to the specific product documentation.\n- You can assign the Instance operator \\(`instance_operator`\\) role for users who handle day-to-day operations without elevated system configuration privileges. Assign this role to users who need to:\n - Check logs and diagnose problems\n - Perform routine maintenance\n - Keep workflows running smoothly\n- Granular admin roles are separate from the existing admin role and must be assigned independently.\n\nBy adopting granular admin roles, you can create a more secure and efficient access management system that aligns with your organization's needs.\n\n\n
\n\nProduct\n\n\n\nRole Name\n\n\n\nDescription\n\n
\n\nAccess Analyzer\n\n\n\naccess\\_analyzer\\_admin\n\n\n\nRole required to use access-analyzer application.\n\n
\n\nAE - StreamConnect\n\n\n\nmessage\\_replication\\_admin\n\n\n\nRole required to access all IntegrationHub stream replication features, enable setup and connection to message brokers, and configure message stream replications.\n\n
\n\nAE - StreamConnect\n\n\n\nstream\\_connect\\_admin\n\n\n\nRole required to manage Stream Connect-related settings for subscriptions, topics, and other configurations.\n\n
\n\nAgent Chat\n\n\n\nawa\\_admin\n\n\n\nRole required to access granular AWA capabilities.\n\n
\n\nAgent Chat\n\n\n\ninteraction\\_admin\n\n\n\nRole required to access granular interaction configuration capabilities.\n\n
\n\nAI Agents\n\n\n\nsn\\_aia.admin\n\n\n\nRole required to access and update Agentic AI tables.\n\n
\n\nAI Search\n\n\n\nais\\_admin\n\n\n\nRole required to manage and view AI Search and NowAssist for Search tables, properties, and configurations.\n\n
\n\nAI Virtual Agent\n\n\n\nsn\\_nowassist\\_admin.nsa\\_admin\n\n\n\nRole required to enable your requesters to have a streamlined, conversational experience that is based on generative AI as they submit a catalog item request in Virtual Agent.\n\n
\n\nApp Governance\n\n\n\nsn\\_aemc.aemc\\_admin\n\n\n\nRole required to have feature admin access for App Engine Management Center and includes scan\\_user.\n\n
\n\nApp Governance\n\n\n\nsn\\_app\\_summary.app\\_summary\\_admin\n\n\n\nRole required to have feature admin access for App Summary.\n\n
\n\nApp Governance\n\n\n\nsn\\_deploy\\_pipeline.deployment\\_pipeline\\_admin\n\n\n\nRole required to have feature admin access for Deployment Pipeline.\n\n
\n\nApp Governance\n\n\n\nsn\\_pipeline.pipeline\\_admin\n\n\n\nRole required to have feature admin access for Pipeline.\n\n
\n\nApplication Vulnerability Response\n\n\n\nsn\\_vul.app\\_sec\\_manager\n\n\n\nRole required for security managers. It is also required for application owners who manage penetration test assessment requests. By default, this role contains granular roles for third-party integration configuration and is required for full read, write, and delete permission on all AVR records and rules.\n\n
\n\nAlumni Center\n\n\n\nsn\\_asc.admin\n\n\n\nRole required to create and manage profiles and features related to an alumni.\n\n
\n\nAudit, History and Journal\n\n\n\naudit\\_admin\n\n\n\nProvides write and delete access to sys\\_audit. Manual record modifications should be avoided. For bulk deletions, use system jobs rather than direct deletion.\n\n
\n\nAuthentication\n\n\n\nadaptive\\_auth\\_policy\\_admin\n\n\n\nRole required to configure adaptive authentication policies and filters, as well as update or delete those created by the role. Additionally, policies and filters created by other users and default configurations are available in read-only mode.\n\n
\n\nAuthentication\n\n\n\nadpative\\_auth\\_admin\n\n\n\nRole required to access and modify Adaptive Authentication configurations, including creating and adjusting policies, managing policy contexts, and configuring filter criteria. Additionally, users can enable or disable adaptive authentication policies as needed. The role also grants access to modify Multi-Factor Authentication \\(MFA\\) settings, enabling users to enforce MFA and adjust MFA factor policies.\n\n
\n\nAuthentication\n\n\n\ncustom\\_url\\_admin\n\n\n\nRole required to configure new custom URLs for the instance, as well as to delete or modify existing custom URL configurations.\n\n
\n\nAuthentication\n\n\n\npassword\\_policy\\_admin\n\n\n\nRole required to configure and manage the password policies in the instance. Users with this role can create, manage, and enable or disable existing and new password policies.\n\n
\n\nAuthentication\n\n\n\nsso\\_config\\_admin\n\n\n\nRole required to access all configurations related to Single Sign-On authentication within the instance. Grants the capability to create and modify feature configurations for SSO SAML, OIDC, Digest, and Certificate-Based Authentication in the instance.\n\n
\n\nAuthentication\n\n\n\nuser\\_authn\\_admin\n\n\n\nRole required to access and modify all user login-specific configurations, such as Single Sign-On \\(SSO\\), Account Recovery, Adaptive Authentication, MFA, and Password Policy.\n\n
\n\nAuthentication Factors\n\n\n\nauth\\_factors\\_admin\n\n\n\nRole required to configure authentication for voice agent environments, with the factors that first identify the caller, then authenticate them before granting access.\n\n
\n\nCareer Conversations\n\n\n\nsn\\_egd\\_act.admin\n\n\n\nRole required to configured all Career Conversations features, including auto closure of conversations and setting up integrations with Microsoft Outlook.\n\n
\n\nCMDB Admin\n\n\n\nsn\\_cmdb\\_admin\n\n\n\nRole required to configure the application and to create, read, write, and delete records in tables.\n\n Provides the highest level of access to tools and UIs within CMDB Workspace and other store apps such as CMDB Coverage, including full access to the Configuration item \\[cmdb\\_ci\\] table. A CMDB Admin, for example, can set policies in the CI Class Manager and application service requirements.\n\n CMDB Admin can also modify default config records under the default identifier or the default identifier itself.\n\n
\n\nCode Assist Experience\n\n\n\nbackground\\_script\\_admin\n\n\n\nRole required to manage background scripts.\n\n
\n\nCode Assist Experience\n\n\n\nnow\\_assist\\_code\\_admin\n\n\n\nRole required to manage the Now Assist for code generation settings in system\\_properties.\n\n
\n\nCode Assist Experience\n\n\n\nnow\\_assist\\_code\\_rag\\_admin\n\n\n\nRole required to manage the Retrieval for code generation app.\n\n
\n\nCollaborative Work Management\n\n\n\nsn\\_cwm.cwm\\_admin\n\n\n\nRole required to update Collaborative Work Management \\(cwm\\) properties and reports.\n\n
\n\nConfiguration Compliance\n\n\n\nsn\\_vulc.admin\n\n\n\nRole required for full read, write, and delete permission on all Configuration Compliance records and rules.\n\n
\n\nContainer Vulnerability Response\n\n\n\nsn\\_vul\\_container.vulnerability\\_admin\n\n\n\nRole required for complete access to the Container Vulnerability Response \\(CVR\\) application and its records. Role required to configure third-party integrations and rules in Container Vulnerability Response.\n\n
\n\nContract Management Pro\n\n\n\nsn\\_cm\\_core.contract\\_admin\n\n\n\nRole required for administrative access to Contracts Core and underlying data.\n\n
\n\nContract Management Pro - Contract Workspace\n\n\n\nsn\\_cm\\_workspace.admin\n\n\n\nRole required to change the Contract Workspace for Contract Management Pro to fit into the business or user requirements.\n\n
\n\nContract Management Pro - Contracts Dashboard\n\n\n\nsn\\_cm\\_pa.pa\\_admin\n\n\n\nRole required to activate and configure the Analytics Pack for Contract Management Pro application.\n\n
\n\nContract Management Pro - Now Assist in Contract Management\n\n\n\nsn\\_cm\\_gen\\_ai.ai\\_contract\\_admin\n\n\n\nRole required for administrative access to the Now Assist in Contract Management application.\n\n
\n\nCloud Accelerate-Cloud Workspace\n\n\n\nsn\\_itom\\_cam.cw\\_admin\n\n\n\nRole required to provision cloud accounts, add an unmanaged cloud account and update cloud account details.\n\n
\n\nCloud Accelerate-CSC\n\n\n\nsn\\_cmp.cloud\\_service\\_user.root\\_admin\n\n\n\nRole required to manage stacks and resource filters.\n\n
\n\nCloud Accelerate - CSC\n\n\n\nsn\\_cmp.cloud\\_admin\n\n\n\nRole required to setup Google Cloud Platform and Microsoft Azure Cloud on Cloud Services Catalog, setup cloud accounts for VMware, Specify the credentials that CSC Terraform Connector, work with stacks, view Cloud Service Requests in Cloud Admin Portal, view and utilize the Cloud Root Cause Analysis reports, debug and troubleshoot Cloud API Trail, create custom tags for cloud resources, Store the Azure service principal credentials in the instance.\n\n
\n\nCloud Accelerate - CPG\n\n\n\nsn\\_cmp.cmp\\_root\\_admin\n\n\n\nRole required to create scan schedules, CI finder mapping, policies by using condition builder, flows, or script, a policy set, resource collectors and view the dashboard and audit issue reports to run remediation and scan configurations.\n\n
\n\nCreator Studio\n\n\n\nsn\\_creatorstudio.configuration\\_admin\n\n\n\nRole required to provide admin privileges for the Creator Studio. The roles contains the following Creator Studio granular admin roles:- sn\\_creatorstudio.task\\_admin\n- sn\\_creatorstudio.app\\_configurator\n- sn\\_creatorstudio.reports\\_viewer\n\n
\n\nCreator Studio\n\n\n\nsn\\_creatorstudio.task\\_admin\n\n\n\nRole required to grant users access to change several fields on the Request Task table or a table that extends Request Task.This role contains the following:- Table-level access for sn\\_creatorstudio\\_task: Create, Write, Delete\n- Field-level access for:\n - sn\\_creatorstudio\\_task.request\\_type, which enables you to change the associated form\n - sn\\_creatorstudio\\_child\\_task.parent, which enables you to change the parent table for any subtask tables created from a task activity added to an app's playbook.\n\n
\n\nCSM - CRM Foundation\n\n\n\nentitlement\\_admin\n\n\n\nRole required to access the entitlement table.\n\n
\n\nCSM - Case Management\n\n\n\nsn\\_csm\\_case\\_type.config\\_admin\n\n\n\nRole required to create, view, update and delete records in the Case type \\[`sn_case_type`\\]​ table.\n\n
\n\nCSM - Case Management\n\n\n\nsn\\_customerservice.case\\_admin\n\n\n\nRole required to create, view, update and delete records in the Customer Service Case \\[`sn_customerservice_case`\\]​ table.\n\n
\n\nCSM - Case Management\n\n\n\nsn\\_case\\_line.admin\n\n\n\nRole required to create, view, update and delete records in the Case Line \\[`sn_case_line`\\]​ table.\n\n
\n\nCSM - Case Management\n\n\n\nsn\\_csm\\_case\\_digest.admin\n\n\n\nRole required to delete record in the Case Digest \\[`sn_csm_case_digest_task`\\] table​. ​Also, can create, view, update and delete records in the Case Digest Configuration \\[`sn_csm_case_digest_config`\\]​ table.\n\n
\n\nCSM - Case Management\n\n\n\nsn\\_task\\_plan.admin\n\n\n\nRole required to create, view, update and delete records in the Task Plan tables.​\n\n
\n\nCSM - Case Management\n\n\n\nsn\\_complaint.admin\n\n\n\nRole required to create, view, update and delete records in the Complaint tables.​\n\n
\n\nCSM - Case Management\n\n\n\nsn\\_onboarding.admin\n\n\n\nRole required to create, view, update and delete records in the Onboarding tables.​\n\n
\n\nCSM - Case Management\n\n\n\nsn\\_csm\\_ppm.admin\n\n\n\nRole required to create, view, update and delete records in the Project Portfolio Management tables.​\n\n
\n\nCSM - Case Management\n\n\n\nsn\\_action\\_status.admin\n\n\n\nRole required to create, view, update and delete records in the Action Status tables.​\n\n
\n\nCSM - Case Management\n\n\n\nsn\\_uib\\_dyn\\_rel\\_rec.admin\n\n\n\nRole required to create, view, update and delete records in the UIB Dynamic Related Records tables.​\n\n
\n\nCSM - Case Management\n\n\n\nsn\\_cs\\_sm.admin\n\n\n\nRole required to create, view, update and delete records in the Customer Service with Service Management tables.​\n\n
\n\nCSM - CRM Foundation\n\n\n\nsales\\_agreement\\_admin\n\n\n\nRole required to have full access to all sales agreement tables.\n\n
\n\nCSM - CRM Foundation\n\n\n\nservice\\_contract\\_admin\n\n\n\nRole required to have full access to all contract tables.\n\n
\n\nCSM - CRM Foundation\n\n\n\nsn\\_crm\\_customer\\_access\\_management\\_admin\n\n\n\nRole required to have admin access to customer access management configuration tables, including related party configurations, responsibility definitions, and responsibility access configurations.\n\n
\n\nCSM - CRM Foundation\n\n\n\nsn\\_crm\\_escalation\\_admin\n\n\n\nRole required to have admin access to all escalations and related configuration tables.\n\n
\n\nCSM - CRM Foundation\n\n\n\nsn\\_crm\\_foundation\\_admin\n\n\n\nRole required to have admin access to CRM configurations, including escalations, query rules, and customer access management. It also contains sn\\_crm\\_foundation\\_data\\_manager role.\n\n
\n\nCSM - CRM Foundation\n\n\n\nsn\\_cs\\_queryrules.admin\n\n\n\nRole required to have admin access to all query rules.\n\n
\n\nCSM - CRM Foundation\n\n\n\nsn\\_install\\_base.install\\_base\\_admin\n\n\n\nRole required to have granular admin access for Install base and related features.\n\n
\n\nCSM - CRM Foundation\n\n\n\nsn\\_l2c\\_core.admin\n\n\n\nRole required to have full access to Lead to Cash Core metadata tables, modules, and application.\n\n
\n\nCSM - CRM Foundation\n\n\n\nsn\\_prm.enterprise\\_partner\\_admin\n\n\n\nRole required to have admin access for partner relationship management.\n\n
\n\nCSM - CRM Foundation\n\n\n\nsn\\_crm\\_sequence.admin\n\n\n\nRole required to give full access to sequence records and its related data.\n\n
\n\nCSM - CRM Foundation\n\n\n\nsn\\_l2c\\_core.admin\n\n\n\nRole required to have full access to Lead to Cash Core metadata tables, modules, and application.\n\n
\n\nCSM - CRM Foundation\n\n\n\nsn\\_tmt\\_core.admin\n\n\n\nRole required to have full access to Sales and Service Core API tables.\n\n
\n\nCSM - Omni\n\n\n\nsn\\_openframe.admin\n\n\n\nRole required to have granular admin access to Open frame tables and properties.\n\n
\n\nCSM - Self Service\n\n\n\nactsub\\_admin\n\n\n\nRole required to access Subscription and Activity Feed Framework related tables and modules.\n\n
\n\nCSM - Self Service\n\n\n\nsn\\_communities.admin\n\n\n\nRole required to access Communities related tables and modules.\n\n
\n\nCSM - Self Service\n\n\n\nsn\\_csm\\_ec.ec\\_admin\n\n\n\nRole required to have granular admin access for engagement messenger tables and Rest APIs.\n\n
\n\nCSM - Self Service\n\n\n\nsn\\_csm\\_walkup.walkup\\_admin\n\n\n\nRole required to access CSM Walkup Experience tables and modules.\n\n
\n\nCSM - Self Service\n\n\n\nsn\\_embeddable\\_core.emb\\_admin\n\n\n\nRole required to have granular admin access for web embeddables admin experience.\n\n
\n\nCSM - Self Service\n\n\n\nsn\\_ext\\_usr\\_reg\\_admin\n\n\n\nRole required to have granular admin access for External user registration.\n\n
\n\nCSM - Self Service\n\n\n\nsn\\_gamification.admin\n\n\n\nRole required to access Gamification related tables and modules.\n\n
\n\nCSM - Self Service\n\n\n\nsn\\_otp\\_support\\_util\\_admin\n\n\n\nRole required to have granular admin access for OTP Support Util.\n\n
\n\nCSM - Base Entities\n\n\n\ncsm\\_admin\n\n\n\nRole required to access to all CSM features and data.\n\n
\n\nCSM - Base Entities\n\n\n\nsn\\_res\\_shaper.admin\n\n\n\nRole required to perform create, update, and delete operations for the Resolution Shaper Config table \\(sys\\_resolutionshaper\\_config\\).\n\n
\n\nCSM - Customer Central\n\n\n\nsn\\_customer\\_central\\_admin\n\n\n\nRole required to access all Customer Central features and data.\n\n
\n\nCustomer Success Management\n\n\n\nsn\\_acct\\_lc.customer\\_success\\_application\\_admin\n\n\n\nRole required to have granular admin access for customer success management tables and server-side access.\n\n
\n\nData Streaming\n\n\n\nhermes\\_admin\n\n\n\nRole required to have access for all Hermes related configuration and maintenance.\n\n
\n\nData Streaming\n\n\n\nidr\\_admin\n\n\n\nRole required to have access for all IDR related configuration and maintenance.\n\n
\n\nData Streaming\n\n\n\ndata\\_mgmt\\_tools\\_admin\n\n\n\nRole required to enable administrators to perform basic Data Management tasks.\n\n
\n\nDigital End-User Experience\n\n\n\nsn\\_dex.admin\n\n\n\nRole required to manage user access to DEX, manage the applications that are being monitored, and handle onboarding or offboarding-related tasks. Used also to troubleshoot any issues that arise within the application.\n\n
\n\nDocument Intelligence\n\n\n\nplatform\\_ml\\_di.admin, sn\\_docintel.admin\n\n\n\nRole required to have granular admin access for Document Intelligence \\(docintel\\) capabilities.\n\n
\n\nDocument Management\n\n\n\ndocument\\_admin\n\n\n\nRole required to manage system properties, security ACLs, and security ACL roles. Manage PDF generation, document conversion and document viewer BASE SYSTEM plugins.\n\n
\n\nDocument Management\n\n\n\nplatform\\_document\\_management\\_admin\n\n\n\nProvides access to perform Create, Read, Update and Delete operations to the Documents, references, versions, lists and list entry tables.\n\n
\n\nEmployee Center Outlook Add-in\n\n\n\nsn\\_outlook\\_addin.outlook\\_addin\\_setup\n\n\n\nRole required to set up and manage the Employee Center Outlook Add-in, including access to the sn\\_outlook\\_addin.portal.suffix system property, modules, UI actions, and app application files.\n\n
\n\nEmployee Center Pro\n\n\n\nsn\\_hr\\_sp.esc\\_admin\n\n\n\nRole required to have read and write access to the feedback task table, Employee Center version 37 onwards.\n\n
\n\nEmployee Profile\n\n\n\nsn\\_employee.admin\n\n\n\nRole required to create and manage employee profiles.\n\n
\n\nEncryption\n\n\n\nsecurity\\_admin\n\n\n\nRole required to perform security operations as an admin.\n\n
\n\nEncryption\n\n\n\nsn\\_kmf.admin\n\n\n\nRole required to have admin and security admin access to be sn\\_kmf.admin. Can assign sn\\_kmf.cryptographic\\_manager or sn\\_kmf.cryptographic\\_auditor role to other users and has read, write, and execution permissions for key operations.\n\n
\n\nEnterprise Architecture\n\n\n\nsn\\_apm.apm\\_admin\n\n\n\nRole required to administer Enterprise Architecture features and configurations\n\n
\n\nEvent Management\n\n\n\nevt\\_mgmt\\_admin\n\n\n\nRole required to have full access to configure Event Management, including event rules, field mapping, alert management rules, and more.\n\n
\n\nExternal Content Connectors\n\n\n\nsn\\_ext\\_conn.xcc\\_admin\n\n\n\nRole required for management of external content connector configuration settings. Can create, read, update, and delete connectors, schedule and run connector crawls, and view crawl logs and analytics.\n\n
\n\nFlow Designer UI\n\n\n\nflow\\_admin\n\n\n\nRole required to have admin access for all flow designer tables.\n\n
\n\nFlow Engines\n\n\n\nflow\\_admin\n\n\n\nRole required to work with backend tables of flow\\_designer.\n\n
\n\nFSC-Accounts Payable Invoice Processing\n\n\n\nsn\\_ap\\_apm.admin\n\n\n\nRole required to have admin access for Accounts Payable Invoice Processing.\n\n
\n\nFSC-Accounts Payable Invoice Processing\n\n\n\nsn\\_ap\\_apm.invoice\\_tolerance\\_admin\n\n\n\nRole required to configure tolerances in Accounts Payable Invoice Processing.\n\n
\n\nFSC-Accounts Payable Invoice Processing\n\n\n\nsn\\_ap\\_cm.admin\n\n\n\nRole required to have admin access for Invoice case management.\n\n
\n\nFSC - Finance Case Management\n\n\n\nsn\\_fin\\_ops.admin\n\n\n\nRole required to access all the features and capabilities of Finance Case Management, including Finance Operations workspace.\n\n
\n\nFSC - Integrations\n\n\n\nsn\\_fcms\\_intg.admin\n\n\n\nRole required to have administrative access for the ERP Integration Framework, inheriting sn\\_fcms\\_intg.integration\\_user and granting admin-level access to manage integration configurations, data, and operations.\n\n
\n\nFSC - Purchase Order Management\n\n\n\nsn\\_poem\\_core.admin\n\n\n\nRole required to have admin access for Purchase Order Management.\n\n
\n\nFSC - SLO\n\n\n\nsn\\_slm.admin\n\n\n\nThis role provides full administrative access to manage supplier-related processes and includes elevated permissions such as`sn_slm.manager`, `decision_table_admin`,`sn_fin.supplier_payment_info_write`,`sn_vdr_risk_asmt.vendor_assessor`, and`sn_shop.shopper`. Users who need complete control over supplier management, vendor assessments, payment information, and related workflows across the SLM application.\n\n
\n\nFSC - SLO\n\n\n\nsn\\_kpi.admin\n\n\n\nProvides full administrative access to manage and configure all aspects of the KPI Framework, including creating, editing, deleting KPIs, and configuring KPI definitions.\n\n
\n\nFSC - SPO\n\n\n\nsn\\_fin.finance\\_admin\n\n\n\nRole required to generate fiscal and accounting periods.\n\n
\n\nFSC - SPO\n\n\n\nsn\\_shop.procurement\\_administrator\n\n\n\nRole required to access the primary data and administration sections of the Purchase Automation module.\n\n
\n\nFSC - SPO\n\n\n\nsn\\_shop.shopping\\_hub\\_admin\n\n\n\nRole required to access all modules of the Source-to-Pay Common Architecture application.\n\n
\n\nFSC - SPO\n\n\n\nsn\\_spend\\_psd.psd\\_admin\n\n\n\nRole required to configure and make changes to system properties, such as creating request types and categories.\n\n
\n\nFSC - SPO\n\n\n\nsn\\_spend\\_sdc.admin\n\n\n\nRole required to access Service Task and Service Request tables, which extends to Procurement Case Management, as well as other infrastructure that forms the foundation of Finance and Supply Chain Workflows products.\n\n
\n\nFSM - Plan Schedule\n\n\n\ndynamic\\_scheduling\\_admin\n\n\n\nRole required to perform administration configuration for Dynamic Scheduling Application.\n\n
\n\nFSM - Plan Schedule\n\n\n\nsn\\_task\\_recommend.task\\_rec\\_admin\n\n\n\nRole required to have granular admin access for Intelligent Task Recommendations \\(sn\\_task\\_recommend\\) plugin.\n\n
\n\nFSM - Plan Schedule\n\n\n\ntimecard\\_admin\n\n\n\nRole required to have write access to all time cards, otherwise users only have access to their own timecards.\n\n
\n\nFSM - Plan Schedule\n\n\n\nsn\\_task\\_grouping.admin\n\n\n\nRole required to have admin access for Task Grouping Feature.\n\n
\n\nFSM - Plan Schedule\n\n\n\nwm\\_admin\n\n\n\nRole required to have admin access for Work Order Management users.\n\n
\n\nGen AI Controller\n\n\n\nglobal\\_genai\\_admin\n\n\n\nRole required to have access to certain GenAI tables that are hosted in the global domain.\n\n
\n\nGrants Management\n\n\n\nsn\\_gsm\\_grnt\\_mgmt.grant\\_admin\n\n\n\nRole required to provide delegated admin access to the Grants Management application.\n\n
\n\nGRC\n\n\n\nsn\\_rec\\_pg\\_vertical.admin\n\n\n\nRole required to have admin access for Record - vertical.\n\n
\n\nGRC - AI Risk and Compliance Management\n\n\n\nsn\\_ai\\_case\\_mgmt.ai\\_case\\_admin\n\n\n\nRole required to have admin access for AI Case Management.\n\n
\n\nGRC - AI Risk and Compliance Management\n\n\n\nsn\\_grc\\_ai\\_gov.ai\\_risk\\_and\\_compliance\\_admin\n\n\n\nRole required to have admin access for AI Risk and Compliance Management.\n\n
\n\nGRC - AI Risk and Compliance Management\n\n\n\nsn\\_privacy.admin\n\n\n\nRole required to be responsible for configuring privacy management solution as a Privacy Admin.\n\n
\n\nGRC - Corp Compliance\n\n\n\nsn\\_audit.admin\n\n\n\nRole required to have admin access for Audit related plugins.\n\n
\n\nGRC - Corp Compliance\n\n\n\nsn\\_compliance.admin\n\n\n\nRole required to have admin access for GRC Compliance related plugins.\n\n
\n\nGRC - Corp Compliance\n\n\n\nsn\\_grc.admin\n\n\n\nRole required to have admin access for GRC core-related plugins.\n\n
\n\nGRC - Corp Compliance\n\n\n\nsn\\_grc\\_advanced.evidence\\_admin\n\n\n\nRole required to access Evidence-related objects as a feature role.\n\n
\n\nGRC - Corp Compliance\n\n\n\nsn\\_grc\\_reg\\_change.it\\_admin\n\n\n\nRole required to have IT admin access for GRC: reg change management plugin and set up integrations with third-party regulatory intelligence providers.\n\n
\n\nGRC - Corp Compliance\n\n\n\nsn\\_grc\\_taxonomy.taxonomy\\_admin\n\n\n\nRole required to have admin access for GRC: Taxonomy.\n\n
\n\nGRC - Formula builder\n\n\n\nsn\\_fb\\_connected.admin\n\n\n\nRole required to have admin access for formula builder application.\n\n
\n\nGRC - Operational resilience\n\n\n\nsn\\_oper\\_res.admin\n\n\n\nRole required to create and delete some operational resilience activities.\n\n
\n\nGRC - Operational resilience\n\n\n\nsn\\_oper\\_res.irm\\_opres\\_admin\n\n\n\nRole required to create and delete both operational resilience activities and IRM activities.\n\n
\n\nHRSD - Case and Knowledge Management\n\n\n\nsn\\_hr\\_core.admin\n\n\n\nRole required to have full HR administrator access — can configure all HR settings, assign roles, and access all HR data.\n\n
\n\nHRSD - Case and Knowledge Management\n\n\n\nsn\\_hr\\_er.admin\n\n\n\nRole required tohave full administrator access to ER module configuration, case management, and setup.\n\n
\n\nHRSD - Case and Knowledge Management\n\n\n\nsn\\_em.admin\n\n\n\nRole required to access and configure all areas within Evidence Management.\n\n
\n\nHRSD - Case and Knowledge Management\n\n\n\nsn\\_interview\\_temp.admin\n\n\n\nRole required to access, read, create, and edit interview question templates, template tags, and Employee Relations properties.\n\n
\n\nHRSD - Case and Knowledge Management\n\n\n\nsn\\_hr\\_ef.admin\n\n\n\nRole required to assign EDM roles, search, read, create, or update employee documents, and manage administration including retention periods, retention policies, security policies, and document types\n\n
\n\nHRSD - Case and Knowledge Management\n\n\n\nsn\\_sp\\_admin\\_ws.admin\n\n\n\nRole required to access workspace and see a consolidated view of the demand and consumption of services offered to customers.\n\n
\n\nHRSD - Case and Knowledge Management\n\n\n\nsn\\_hr\\_ra.admin\n\n\n\nRole required to configure HR related Recommended Context tables to show different recommendations in HR Agent\n\n
\n\nHRSD - Employee Journey Management\n\n\n\nsn\\_ja.admin\n\n\n\nRole required to create and manage all Journey Accelerator components, tables, and data.\n\n
\n\nHRSD - Employee Journey Management\n\n\n\nsn\\_hr\\_le.admin\n\n\n\nRole required to create, manage, and add users to groups within Lifecycle Events.\n\n Can access:\n\n - Guided Setup\n- Manage Owner Groups\n- Manage Roles\n- LE UI Configuration\n- Onboarding Executive Dashboard\n- Onboarding Executive View\n\n
\n\nHRSD - Employee Journey Management\n\n\n\nsn\\_hr\\_le\\_pa.admin\n\n\n\nLifecycle Events Performance Analytics Admin role for the scoped application.\n\n - Access and modify the Lifecycle Events PA content packs.\n- Edits Performance Analytics properties.\n- Accesses Admin Console.\n- Launch Dependency Assessment.\n\n
\n\nHRSD - Employee Journey Management\n\n\n\nsn\\_jny.admin\n\n\n\nRole required to create and manage all Journey designer and Journey Accelerator configurations and features.\n\n
\n\nHRSD-Employee Journey Management\n\n\n\nsn\\_ja.admin\n\n\n\nRole required to create and manage all Journey Accelerator components, tables, and data.\n\n
\n\nHRSD-Employee Journey Management\n\n\n\nsn\\_hr\\_le.admin\n\n\n\nRole required to create, manage, and add users to groups within Lifecycle Events.\n\n Can access:\n\n - Guided Setup\n- Manage Owner Groups\n- Manage Roles\n- LE UI Configuration\n- Onboarding Executive Dashboard\n- Onboarding Executive View\n\n
\n\nHRSD-Employee Journey Management\n\n\n\nsn\\_hr\\_le\\_pa.admin\n\n\n\nLifecycle Events Performance Analytics Admin role for the scoped application.\n\n - Access and modify the Lifecycle Events PA content packs.\n- Edits Performance Analytics properties.\n- Accesses Admin Console.\n- Launch Dependency Assessment.\n\n
\n\nHRSD-Employee Journey Management\n\n\n\nsn\\_jny.admin\n\n\n\nRole required to create and manage all Journey designer and Journey Accelerator configurations and features.\n\n
\n\nHRSD - Hiring Experiences\n\n\n\nsn\\_ta\\_hiring\\_core.admin\n\n\n\nRole required to have super admin access to the Hiring Experiences environment.\n\n
\n\nHRSD - Hiring Experiences\n\n\n\nsn\\_ta\\_tp.talent\\_profile\\_admin\n\n\n\nRole required to have admin access to set up Talent Profile.\n\n
\n\nHRSD - Talent Experience\n\n\n\nsn\\_egd\\_core.admin\n\n\n\nRole required to have admin access for talent development core.\n\n
\n\nHRSD - Talent Experience\n\n\n\nsn\\_egd\\_shared\\_lib.admin\n\n\n\nRole required to have admin access for the shared library across HR.\n\n
\n\nHRSD - Talent Experience\n\n\n\nsn\\_hr\\_lm.admin\n\n\n\nRole required to track HR license usage by customer as an admin.\n\n
\n\nHRSD - Talent Experience\n\n\n\nsn\\_td\\_na.admin\n\n\n\nRole required to have admin access for Now Assist for talent.\n\n
\n\nHealth and Safety\n\n\n\nsn\\_ohs\\_im.admin\n\n\n\nRole required to have admin access for Health and Safety applications.\n\n
\n\nIdentity\n\n\n\nagent\\_role\\_config\\_admin\n\n\n\nRole required to access and modify Agent role configurations \\(role masking\\).\n\n
\n\nIdentity\n\n\n\nmi\\_admin\n\n\n\nRole required to have admin access for Machine Identity Console. It's a high privilege as it contains other admin roles, assign carefully.\n\n
\n\nIdentity\n\n\n\nprivileged\\_role\\_config\\_admin\n\n\n\nRole required to configure which roles are designated as privileged in the system.\n\n
\n\nIdentity\n\n\n\nrole\\_delegator\\_admin\n\n\n\nRole required to have admin access for Role delegation feature.\n\n
\n\nIdentity\n\n\n\nscim\\_client\\_config\\_admin\n\n\n\nRole required to access and modify SCIM client configurations.\n\n
\n\nIdentity\n\n\n\nscim\\_config\\_admin\n\n\n\nRole required to access and modify SCIM provider-related configurations such as SCIM extension schema and SCIM system properties.\n\n
\n\nIH Core\n\n\n\nconnection\\_admin\n\n\n\nRole required to have access to Connections \\[sys\\_connection\\] and Credentials \\[discovery\\_credentials\\] table.\n\n
\n\nIH Core\n\n\n\ncredential\\_admin\n\n\n\nRole required to have access to Credentials \\[discovery\\_credentials\\] table.\n\n
\n\nIH Core\n\n\n\nih\\_process\\_sync\\_admin\n\n\n\nRole required to create, edit, or delete Process Sync related tables.\n\n
\n\nIndustrial Connected Workforce\n\n\n\nsn\\_icw.application\\_admin\n\n\n\nRole required to have application admin access for Industrial Connected Workforce.\n\n
\n\nInbound web services\n\n\n\nweb\\_service\\_admin\n\n\n\nRole required for administrative access to create Scripted REST and GraphQL operations.\n\n
\n\nInbound web services\n\n\n\nweb\\_service\\_configuration\\_admin\n\n\n\nRole required to manage Web Service configurations for REST, GraphQL, and SOAP services, including behavior and security settings. To learn more, see Web Service configurations.\n\n
\n\nIndustry Banking\n\n\n\nsn\\_appss.admin\n\n\n\nRole required to create, update, delete, and read request types, inputs, outputs, and definitions.\n\n
\n\nIndustry Banking\n\n\n\nsn\\_bom.admin\n\n\n\nRole required to have access to all the banking data entities, plus admin privileges as the banking admin.\n\n
\n\nIndustry Banking\n\n\n\nsn\\_bom.service\\_definition\\_admin\n\n\n\nRole required to have full access to the service definition records as the FSO service definition admin.\n\n
\n\nIndustry Banking\n\n\n\nsn\\_bom\\_clo\\_b2b.admin\n\n\n\nRole required to have access to all Business customers' life-cycle operations data and admin privileges.\n\n
\n\nIndustry Banking\n\n\n\nsn\\_bom\\_clo\\_b2c.admin\n\n\n\nRole required to have access to all personal customers life-cycle operations data and admin privileges related to personal customers life-cycle operations.\n\n
\n\nIndustry Banking\n\n\n\nsn\\_bom\\_compl.admin\n\n\n\nRole required to have access to all complaint operations data and admin privileges as the Financial Services Complaint Admin.\n\n
\n\nIndustry Banking\n\n\n\nsn\\_bom\\_credit\\_asmt.admin\n\n\n\nRole required to have access to all credit assessment data and admin privileges.\n\n
\n\nIndustry Banking\n\n\n\nsn\\_bom\\_credit\\_card.admin\n\n\n\nRole required to have access to all credit card service tasks and admin privileges.\n\n
\n\nIndustry Banking\n\n\n\nsn\\_bom\\_deposit\\_b2b.admin\n\n\n\nRole required to have access to all Business Deposit Operations data and admin privileges.\n\n
\n\nIndustry Banking\n\n\n\nsn\\_bom\\_deposit\\_b2c.admin\n\n\n\nRole required to have access to all personal deposit operations data and admin privileges.\n\n
\n\nIndustry Banking\n\n\n\nsn\\_bom\\_fraud.admin\n\n\n\nRole required to have access to all Fraud Operations data and admin privileges.\n\n
\n\nIndustry Banking\n\n\n\nsn\\_bom\\_kyc.admin\n\n\n\nRole required to have access to all Business KYC operations data and admin privileges.\n\n
\n\nIndustry Banking\n\n\n\nsn\\_bom\\_loan.b2c\\_admin\n\n\n\nRole required to have access to all loan operations data and admin privileges.\n\n
\n\nIndustry Banking\n\n\n\nsn\\_bom\\_loan\\_b2b.admin\n\n\n\nRole required to have access to all Business loan operations data and admin privileges.\n\n
\n\nIndustry Banking\n\n\n\nsn\\_bom\\_pa.admin\n\n\n\nRole required to have access to all the banking data entities as the performance analytics admin, plus admin privileges.\n\n
\n\nIndustry Banking\n\n\n\nsn\\_bom\\_payment.admin\n\n\n\nRole required to have access to all payment operations data and admin privileges.\n\n
\n\nIndustry Banking\n\n\n\nsn\\_bom\\_po.admin\n\n\n\nRole required to have admin privileges.\n\n
\n\nIndustry Banking\n\n\n\nsn\\_bom\\_remote.admin\n\n\n\nRole required to have access to all remote data and admin privileges as the FSO Remote Tables and Lookup Admin.\n\n
\n\nIndustry Banking\n\n\n\nsn\\_bom\\_treasury.admin\n\n\n\nRole required to have access to all treasury operations data and admin privileges related to treasury operations.\n\n
\n\nIndustry Banking\n\n\n\nsn\\_data\\_sec.admin\n\n\n\nRole required to have access to the Tokenizer Resource Configuration table and admin privileges.\n\n
\n\nIndustry Banking\n\n\n\nsn\\_doc\\_processor.admin\n\n\n\nRole required to have access to all document entities and admin privileges.\n\n
\n\nIndustry Banking\n\n\n\nsn\\_evnt\\_inq.admin\n\n\n\nRole required to have admin access for Event Inquiry.\n\n
\n\nIndustry Banking\n\n\n\nsn\\_fso\\_intg\\_friss.admin\n\n\n\nRole required to manage the flows for FRISS integration.\n\n
\n\nIndustry Banking\n\n\n\nsn\\_fso\\_intg\\_jha.admin\n\n\n\nRole required to manage the flows for JHA integration.\n\n
\n\nIndustry Banking\n\n\n\nsn\\_ins\\_claim.admin\n\n\n\nRole required to have access to all Insurance Claims Core tables and admin privileges.\n\n
\n\nIndustry Banking\n\n\n\nsn\\_ins\\_claim\\_cml.admin\n\n\n\nRole required to have access to all Commercial claim operations data and admin privileges.\n\n
\n\nIndustry Banking\n\n\n\nsn\\_ins\\_claim\\_indl.admin\n\n\n\nRole required to have access to all Individual Life claim operations data and admin privileges.\n\n
\n\nIndustry Banking\n\n\n\nsn\\_ins\\_claim\\_pers.admin\n\n\n\nRole required to have access to all Personal claim operations data and admin privileges.\n\n
\n\nIndustry Banking\n\n\n\nsn\\_ins\\_gen\\_claim.admin\n\n\n\nRole required to have access to all Insurance claims operations data and admin privileges.\n\n
\n\nIndustry Banking\n\n\n\nsn\\_ins\\_group\\_life.admin\n\n\n\nRole required to have access to all Group Life and Disability Servicing data and admin privileges.\n\n
\n\nIndustry Banking\n\n\n\nsn\\_ins\\_group\\_uw.admin\n\n\n\nRole required to have access to all Group Life and Disability Underwriting operations data and admin privileges.\n\n
\n\nIndustry Banking\n\n\n\nsn\\_ins\\_indiv\\_life.admin\n\n\n\nRole required to have access to all Individual Life Servicing operations data and admin privileges.\n\n
\n\nIndustry Banking\n\n\n\nsn\\_ins\\_indiv\\_uw.admin\n\n\n\nRole required to have access to all individual life insurance underwriting operations data and admin privileges.\n\n
\n\nIndustry Banking\n\n\n\nsn\\_ins\\_policy\\_b2b.admin\n\n\n\nRole required to have access to all Commercial policy operations data and admin privileges.\n\n
\n\nIndustry Banking\n\n\n\nsn\\_ins\\_policy\\_b2c.admin\n\n\n\nRole required to have admin access for Personal lines policy cases.\n\n
\n\nIndustry Banking\n\n\n\nsn\\_ins\\_siu.admin\n\n\n\nRole required to have access to all SIU data and admin privileges.\n\n
\n\nIndustry Banking\n\n\n\nsn\\_ins\\_underwrite.admin\n\n\n\nRole required to have access to all insurance underwriting operations data and admin privileges.\n\n
\n\nIndustry Banking\n\n\n\nsn\\_ins\\_uw\\_b2b.admin\n\n\n\nRole required to have access to all Insurance commercial underwriting operations data and admin privileges.\n\n
\n\nIndustry Banking\n\n\n\nsn\\_jha\\_spoke.admin\n\n\n\nRole required to have admin access for JHA.\n\n
\n\nIndustry Banking\n\n\n\nsn\\_payment\\_card.admin\n\n\n\nRole required to create, read, write, and delete Payment Card records.\n\n
\n\nIndustry Banking\n\n\n\nsn\\_req\\_criteria.admin\n\n\n\nRole required to have access to all the service request criteria data entities as the admin.\n\n
\n\nInformation Request Playbook\n\n\n\nsn\\_gsm\\_info\\_req.admin\n\n\n\nRole required to provide delegated admin access to the Information Request Playbook application.\n\n
\n\nIntegrationHub - Finance and Operations Spoke\n\n\n\nsn\\_ms\\_fin\\_ops\\_spk.admin\n\n\n\nRole required to have admin access for the Microsoft Dynamics 365 for Finance and Operations Spoke.\n\n
\n\nIntegrationHub - Finance and Operations Spoke\n\n\n\nsn\\_onedrive\\_spoke.Microsoft\\_OneDrive\\_Admin\n\n\n\nRole required to have admin access for the Microsoft Dynamics 365 for Finance and Operations Spoke.\n\n
\n\nIntegrationHub - Finance and Operations Spoke\n\n\n\nsn\\_uipath\\_spoke.uipath\\_admin\n\n\n\nRole required to have admin access for UiPath spoke tables.\n\n
\n\nITAM\n\n\n\nasset\\_licensing\\_admin\n\n\n\nRole required to have granular admin access for ITAM licensing capabilities.\n\n
\n\nITAM\n\n\n\nasset\\_recommendation\\_admin\n\n\n\nRole required to have granular admin access for Recommendations capabilities.\n\n
\n\nITAM\n\n\n\nasset\\_system\\_admin\n\n\n\nRole required to have granular admin access for Asset management capabilities.\n\n
\n\nITAM\n\n\n\nasset\\_task\\_admin\n\n\n\nRole required to have access to create and delete for asset task table.\n\n
\n\nITAM\n\n\n\ncontract\\_system\\_admin\n\n\n\nRole required to have granular admin access for Contract capabilities.\n\n
\n\nITAM\n\n\n\nprocurement\\_system\\_admin\n\n\n\nRole required to have granular admin access for Procurement capabilities.\n\n
\n\nITAM - CCM\n\n\n\nsn\\_cld\\_intg\\_core.cloud\\_integrations\\_admin\n\n\n\nRole required to configure Billing Download jobs and Price Sheet Download jobs.\n\n
\n\nITAM - CCM\n\n\n\nsn\\_cld\\_intg\\_core.read\n\n\n\nRole required to give access to all the persons for a specific table \\(this is strictly for internal purpose and won’t be exposed to the customer\\).\n\n
\n\nITAM - CCM\n\n\n\nsn\\_cld\\_spend\\_core.spend\\_admin\n\n\n\nRole required to have access to spend dashboards and tables.\n\n
\n\nITAM - CCM\n\n\n\nsn\\_clin\\_core.insights\\_admin\n\n\n\nRole required to have complete access to whole application as a super user and access to modify scripts and flows.\n\n
\n\nITAM - EAM\n\n\n\nsn\\_eam.enterprise\\_admin\n\n\n\nRole required to have access to entire enterprise application.\n\n
\n\nITAM - EAM\n\n\n\nasset\\_aia\\_admin\n\n\n\nRole required to have access to ITAM agents capabilities.\n\n
\n\nITAM - EAM\n\n\n\nasset\\_integration\\_admin\n\n\n\nRole required to have access to integration capabilities.\n\n
\n\nITAM - HAM\n\n\n\nasset\\_aia\\_admin\n\n\n\nRole required to have access to ITAM agents capabilities.\n\n
\n\nITAM - HAM\n\n\n\nasset\\_integration\\_admin\n\n\n\nRole required to have access to integration capabilities.\n\n
\n\nITAM - HAM\n\n\n\nsn\\_hamp.ham\\_system\\_admin\n\n\n\nRole required to have granular admin access for Advanced Shipment Notification \\(ASN\\).\n\n
\n\nITAM - SAM\n\n\n\nsam\\_admin\n\n\n\nRole required to have access to the entire Software Asset Management application.\n\n
\n\nITAM - SAM\n\n\n\nsam\\_integrator\n\n\n\nRole required to create and manage SaaS integration profiles.\n\n
\n\nITOM - Agent Framework\n\n\n\nagent\\_client\\_collector\\_admin\n\n\n\nRole required to have admin privileges for management of the agent client collector store application.\n\n
\n\nITOM - CA\n\n\n\nsn\\_\\_itom\\_ccg.admin\n\n\n\nRole required to have admin access for Cloud Configuration Governance set of apps.\n\n
\n\nITOM - Cloud Configuration Governance\n\n\n\nsn\\_cmp.cloud\\_root\\_admin\n\n\n\nRole required to have admin access for Cloud Provisioning and Governance set of Apps.\n\n
\n\nITOM - Cloud Configuration Governance\n\n\n\nsn\\_itom\\_cam.cw\\_admin\n\n\n\nRole required to have admin access for Cloud Workspace Application.\n\n
\n\nITOM - Certificate Inventory and Management\n\n\n\nsn\\_disco\\_certmgmt.pki\\_admin\n\n\n\nRole required to have granular admin access for Certificate Inventory and Management.\n\n
\n\nITOM - Certificate Inventory and Management\n\n\n\nsn\\_disco\\_firewall.firewall\\_admin\n\n\n\nRole required to change non-standard attributes \\(not present in the original firewall\\) for a firewall record like, status, purpose, etc. The attributes present in the firewall are immutable.\n\n
\n\nITOM - Certificate Inventory and Management\n\n\n\nsn\\_itom\\_licensing.admin\n\n\n\nRole required to configuration access for ITOM/OT SU Licensing.\n\n
\n\nITOM - Tag Governance\n\n\n\nsn\\_itom\\_tag.tag\\_governance\\_admin\n\n\n\nRole required to have granular configuration access for Tag Governance.\n\n
\n\nITOM - Discovery\n\n\n\ndiscovery\\_admin\n\n\n\nRole required to access the \"Discovery\" and \"Discovery Definition\" applications to configure, monitor, and run Discovery operations.\n\n
\n\nITOM - Leap\n\n\n\nsn\\_itom\\_leap.leap\\_admin\n\n\n\nRole required to have admin access to leap application, enabling users to activate skills and create artifacts.\n\n
\n\nITOM - Leap Agent\n\n\n\nsn\\_itom\\_leap.leap\\_agent\n\n\n\nRole required to access the LEAP menu from the Service Operations Workspace and trigger LEAP executions.\n\n
\n\nITOM - Leap Ansible Agent Worker\n\n\n\nsn\\_itom\\_leap.leap\\_ansible\\_agent\\_worker\n\n\n\nRole required for Ansible Discovery Agent and Execution Agent to access Ansible Automation Platform integration features.\n\n
\n\nITOM - Leap Ansible Mapping Read\n\n\n\nsn\\_itom\\_leap.ansible\\_mapping\\_read\n\n\n\nRole required to read step-to-job mappings for Ansible automation integration.\n\n
\n\nITOM - Leap Ansible Mapping Write\n\n\n\nsn\\_itom\\_leap.ansible\\_mapping\\_write\n\n\n\nRole required to create and update step-to-job mappings for Ansible automation integration \\(LEAP Admin only\\).\n\n
\n\nITSM - FE\n\n\n\nsn\\_sow\\_admin.sn\\_sow\\_admin\n\n\n\nRole required to oversee service operations workspace-related configurations as `sn_sow_admin` and help customer admin to configure product features and maintain organizational policies.\n\n
\n\nITSM - Incident Management\n\n\n\nsn\\_incident\\_admin\n\n\n\nRole required to configure all Incident Management features including incident management properties.\n\n
\n\nITSM - Major Incident Management\n\n\n\nsn\\_mim\\_admin\n\n\n\nRole required to configure all Major Incident Management features including major incident properties and trigger rules.\n\n
\n\nITSM - Incident Communications Management\n\n\n\nsn\\_iam\\_admin\n\n\n\nRole required to configure all Incident Communications Management features including creating, editing, or canceling incident communication plan, communication task, and managing contact information. Additionally, this role can administrate all Incident Communications Management capabilities.\n\n
\n\nITSM - Contact Management\n\n\n\nsn\\_contact\\_admin\n\n\n\nRole required to configure all Contact Management features including creating and editing contact definitions, contact responsibilities, configuration of MI users, recipient lists, and groups.\n\n
\n\nITSM - Task Communications Management\n\n\n\nsn\\_tcm\\_admin\n\n\n\nRole required to configure all Task Communications Management features including communication plans and tasks.\n\n
\n\nITSM - Task Outage\n\n\n\nsn\\_task\\_outage\\_admin\n\n\n\nRole required to configure all Task Outage features including the mapping between the Task \\[task\\] table and the Outage \\[cmdb\\_ci\\_outage\\] table.\n\n
\n\nITSM - Change Management\n\n\n\nsn\\_change\\_admin\n\n\n\nRole required to configure Change Management features and system properties.\n\n
\n\nJourney Accelerator\n\n\n\nsn\\_ja.admin\n\n\n\nRole required to create and manage all Journey Accelerator components, tables, and data.\n\n
\n\nJourney Designer\n\n\n\nsn\\_jny.admin\n\n\n\nRole required to create and manage all Journey designer and Journey Accelerator configurations and features.\n\n
\n\nKey Management Framework\n\n\n\nsn\\_kmf.admin\n\n\n\nRole required to assigns roles to other users to perform operations around the ServiceNow Key Management Framework.\n\n
\n\nKnowledge management\n\n\n\nknowledge\\_Admin\n\n\n\nRole required to have admin access for Knowledge management.\n\n
\n\nLifecycle Events\n\n\n\nsn\\_hr\\_le.admin\n\n\n\nRole required to create, manage, and add users to groups within Lifecycle Events.\n\n
\n\nLocalization Framework\n\n\n\nlocalization\\_admin\n\n\n\nRole that manages the Localization Framework application. This role is also used in Localization Workspace.\n\n
\n\nLSD - Legal Request Management\n\n\n\nsn\\_lg\\_ops.legal\\_admin\n\n\n\nRole required for administrative access to all legal apps and the underlying data.\n\n
\n\nLSD - Legal Request Management\n\n\n\nsn\\_lg\\_ops.request\\_admin\n\n\n\nRole required for administrative access to the Legal Request module with full access to data.\n\n
\n\nLSD - Legal Request Management\n\n\n\nsn\\_lg\\_ops.legal\\_assignment\\_rules\\_admin\n\n\n\nRole required for administrative access to the Assignment Rules module in legal apps.\n\n
\n\nLSD - Legal Request Management\n\n\n\nsn\\_lg\\_ops.legal\\_catalog\\_admin\n\n\n\nRole required for administrative access to the Catalog administration module in legal apps.\n\n
\n\nLSD - Legal Request Management\n\n\n\nsn\\_lg\\_ops.legal\\_notification\\_admin\n\n\n\nRole required for administrative access to the Notifications module in legal apps to configure email notifications.\n\n
\n\nLSD - Legal Matter Management\n\n\n\nsn\\_lg\\_matter.matter\\_admin\n\n\n\nRole required for the administrative access to legal matters and the underlying data.\n\n
\n\nLSD - Legal Content Review\n\n\n\nsn\\_lg\\_cont\\_review.admin\n\n\n\nRole required for administrative access to the Legal Content Review feature and its underlying data.\n\n
\n\nLSD - Legal Digital Forensics\n\n\n\nsn\\_lg\\_forensics.forensics\\_admin\n\n\n\nRole required for administrative access to the Legal Digital Forensics app and full access to the underlying data.\n\n
\n\nLSD - Legal Investigations\n\n\n\nsn\\_lg\\_investigate.admin\n\n\n\nRole required for administrative access to the Legal Investigations app and full access to the underlying data.\n\n
\n\nLSD - Legal Simple Privacy\n\n\n\nsn\\_lg\\_simple\\_priva.privacy\\_admin\n\n\n\nRole required for administrative access to the Legal Simple Privacy app and full access to the underlying data.\n\n
\n\nLSD - Gifts and Entertainment Compliance\n\n\n\nsn\\_lg\\_gifts.gifts\\_admin\n\n\n\nRole required for administrative access to the Gifts & Entertainment app and full access to the underlying data.\n\n
\n\nLSD - Legal Conflict of Interest\n\n\n\nsn\\_lg\\_coi.coi\\_admin\n\n\n\nRole required for administrative access to the Legal Conflict of Interest app and full access to the underlying data.\n\n
\n\nLSD - Legal Hold Notification\n\n\n\nsn\\_Ig\\_hold.legal\\_hold\\_admin\n\n\n\nRole required for administrative access to the Legal Hold Notification app and full access to the underlying data.\n\n
\n\nLSD - Now Assist for Legal Service Delivery\n\n\n\nsn\\_lg\\_gen\\_ai.admin\n\n\n\nRole required for administrative access to the Now Assist for Legal Service Delivery application.\n\n
\n\nLSD - Contract Management Pro for Legal Service Delivery\n\n\n\nsn\\_lg\\_cnt.contract\\_admin\n\n\n\nRole required for administrative access to the Contract Management Pro for Legal Service Delivery app and full access to the underlying data.\n\n
\n\nLSD - Advanced Work Assignment for Legal Service Delivery\n\n\n\nsn\\_lg\\_awa.admin\n\n\n\nRole required for administrative access to the Advanced Work Assignment for for Legal Service Delivery applications.\n\n
\n\nLSD - Legal Counsel Center\n\n\n\nsn\\_lg\\_cf\\_workspace.admin\n\n\n\nRole required to change the Legal Counsel Center Workspace for Legal Request Management to fit into the business or user requirements.\n\n
\n\nLSD - External Legal Service Center\n\n\n\nsn\\_lg\\_ext\\_portal.ext\\_admin\n\n\n\nRole required for administrative access to the External Legal Service Centre application and full access to underlying data.\n\n
\n\nLSD - Legal and Contracts Common Utilities\n\n\n\nsn\\_lco\\_cmn.admin\n\n\n\nRole required for administrative access to Legal and Contracts Common Utilities records.\n\n
\n\nMobile\n\n\n\nmobile\\_admin\n\n\n\nRole required to configure mobile applications.\n\n
\n\nNotification\n\n\n\nemail\\_admin\n\n\n\nRole required to perform resend email and reprocess inbound email functionality.\n\n
\n\nNotification\n\n\n\nemail\\_bounce\\_admin\n\n\n\nRole required to administer email bounce functionality.\n\n
\n\nNotification\n\n\n\nemail\\_digest\\_admin\n\n\n\nRole required to monitor email digest.\n\n
\n\nNotification\n\n\n\nnotification\\_admin\n\n\n\nRole required to configure notifications.\n\n
\n\nNotification\n\n\n\nnotification\\_category\\_admin\n\n\n\nRole required to configure notification category.\n\n
\n\nNotification\n\n\n\nnotification\\_classification\\_admin\n\n\n\nRole required to configure notification classification.\n\n
\n\nNotification\n\n\n\nportal\\_notification\\_pref\\_admin\n\n\n\nRole required to configure sys\\_recipient\\_user\\_mapping table.\n\n
\n\nNotification\n\n\n\npush\\_admin\n\n\n\nRole required to manage push notifications.\n\n
\n\nNotification\n\n\n\nsmime\\_certificate\\_admin\n\n\n\nRole required to administer SMIME public certificate.\n\n
\n\nNotify\n\n\n\nnotify\\_setup\\_admin\n\n\n\nRole required to configure Notify features and system properties.\n\n
\n\nNow Assist - CSM\n\n\n\nsn\\_customerservice\\_agent\n\n\n\nRole required to enable Now Assist for CSM Gen AI skills for customer service agents. It grants access to all Now Assist for CSM skills such as Generate Resolution Notes, Case Summarization, and Chat Summarization.\n\n
\n\nNow Assist - CSM\n\n\n\nsn\\_customerservice.consumer\\_agent\n\n\n\nRole required to enable Now Assist for CSM Gen AI skills for customer service agents. It grants access to all Now Assist for CSM skills such as Generate Resolution Notes, Case Summarization, and Chat Summarization.\n\n
\n\nNow Assist for HR Service Delivery\n\n\n\nsn\\_hr\\_gen\\_ai.admin\n\n\n\nRole required to configure and manage Now Assist for HR Service Delivery.\n\n
\n\nNow Assist for HR Service Delivery\n\n\n\nsn\\_hr\\_ai\\_agents.admin\n\n\n\nRole required to configure and manage the HR Service Delivery AI Agent collection.\n\n
\n\nNow Assist for HR Service Delivery\n\n\n\nsn\\_hr\\_aia\\_voice.admin\n\n\n\nRole required to configure and manage voice agents in the HR Service Delivery AI Agent collection.\n\n
\n\nNow Assist - TMT\n\n\n\nsn\\_tmt\\_agentic\\_ai.app\\_admin\n\n\n\nRole required to manage the Telecommunications Media and Technology AI agent collection.\n\n
\n\nNow Assist for Vulnerability Response\n\n\n\naia-admin\n\n\n\nRole required for administrative access to Now Assist for Vulnerability Response.\n\n
\n\nOn-Call Scheduling\n\n\n\nsn\\_on\\_call\\_admin\n\n\n\nRole required to configure On-Call Scheduling features and system properties.\n\n
\n\nOperational Technology - CMDB\n\n\n\ncmdb\\_ot\\_admin\n\n\n\nRole required to manage all OT CMDB tables and records as an admin.\n\n
\n\nOperational Technology - ISA\n\n\n\ncmdb\\_ot\\_isa\\_admin\n\n\n\nRole required to manage all ISA Equipment Model records and Equipment Model Template records as an admin.\n\n
\n\nOperational Technology - Industrial Process Health\n\n\n\not\\_health\\_admin\n\n\n\nRole required to have admin access to Industrial process health application and related functions.\n\n
\n\nOperational Technology - Subnet Mapping\n\n\n\nsn\\_ot\\_amazing\\_admin\n\n\n\nRole required to manage OT Subnet Mapping records in 'ot\\_subnet\\_mapping' table and OT Subnet Mapping properties as an admin.\n\n
\n\nOperational Technology - Change Management\n\n\n\nsn\\_ot\\_change\\_admin\n\n\n\nRole required to have admin access to the OT Change Management Application and related functions.\n\n
\n\nOperational Technology - Incident Management\n\n\n\nsn\\_ot\\_incident\\_admin\n\n\n\nRole required to have admin access to the OT Incident Management Application and related functions.\n\n
\n\nOperational Technology - Vulnerability Integration\n\n\n\nsn\\_otvr.integration\\_admin\n\n\n\nRole required to have admin access for OT Vulnerability Integration application.\n\n
\n\nOperational Technology - Risk Score Calculator application\n\n\n\nsn\\_risk\\_score\\_calc.admin\n\n\n\nRole required to have admin access to Risk Score Calculator application and related functions.\n\n
\n\nOutlook Actionable Messages integration\n\n\n\noam\\_admin\n\n\n\nRole required to access and manage Outlook Actionable Messages configurations, including system properties and OAM definitions.\n\n
\n\nPassword policy\n\n\n\npassword\\_policy\\_admin\n\n\n\nRole required to configure password policy-related items.\n\n
\n\nPassword Reset\n\n\n\npassword\\_reset\\_admin\n\n\n\nRole required to configure Password Reset features and system properties.\n\n
\n\nPlatform\n\n\n\nsource\\_control\\_admin\n\n\n\nRole required to perform all source control functionality.\n\n
\n\nPlatform\n\n\n\nupdate\\_set\\_admin\n\n\n\nRole required to create, delete, and manage Update Sets.\n\n
\n\nPlatform\n\n\n\ncds\\_client\\_admin\n\n\n\nRole required to have admin access for client-side framework of Canonical Data Services \\(CDS\\).\n\n
\n\nPlatform\n\n\n\ncluster\\_node\\_admin\n\n\n\nRole required to have admin access for instance node and cluster configuration \\(VNCC\\) related tables.\n\n
\n\nPlatform\n\n\n\nnds\\_admin\n\n\n\nRole required to have admin access for Normalization Data Services.\n\n
\n\nPlatform\n\n\n\nnormalizer\n\n\n\nRole required to have admin access for Field Normalization feature.\n\n
\n\nPlatform Server - Side Scripting\n\n\n\nscript\\_include\\_admin\n\n\n\nRole required to have granular access to sys\\_script\\_include.\n\n
\n\nPlatform Server - Side Scripting\n\n\n\nsys\\_es\\_latest\\_script\\_admin\n\n\n\nRole required to have granular access to sys\\_es\\_latest\\_script.\n\n
\n\nPlatform Server - Side Scripting\n\n\n\nsysevent\\_script\\_action\\_admin\n\n\n\nRole required to have granular access to sysevent\\_script\\_action\\_admin.\n\n
\n\nPlatform Data Fabric\n\n\n\ndf\\_connection\\_admin\n\n\n\nRole required to establish connection to available data sources as a connection admin, and manage access to these connections for data steward users.\n\n
\n\nPlatform Deployment Analyzer\n\n\n\ndeployment\\_analyzer\\_admin\n\n\n\nRole required to access Deployment Analyzer tables to set up and see results for Deployment Analyzer. Doesn’t have access to create script includes.\n\n
\n\nPlatform Dev Sandbox\n\n\n\nsandbox\\_manager\n\n\n\nRole required to manage the life-cycle of all developer sandboxes as a Sandbox Manager.\n\n
\n\nPlatform Event Processing\n\n\n\nevents\\_admin\n\n\n\nRole required to be a System Events administrator involved in the events processing feature of the system.\n\n
\n\nPlatform ISM\n\n\n\nresponse\\_header\\_admin\n\n\n\nRole required to have read, write, create, delete, and list\\_edit access for records in HTTP Response Header table \\(sys\\_response\\_header\\).\n\n
\n\nPlatform Scheduler\n\n\n\napp\\_resource\\_quota\\_admin\n\n\n\nRole required to configure and manage Application Resource Quotas plugin.\n\n
\n\nPlatform Scheduler\n\n\n\nbusiness\\_calendar\\_admin\n\n\n\nRole required to configure and manage plugins and features related to business calendars \\(com.glide.business\\_calendars, com.glide.business\\_calendars.scheduled\\_jobs\\).\n\n
\n\nPlatform Scheduler\n\n\n\nsystem\\_scheduler\\_admin\n\n\n\nRole required to configure and manage scheduler-related plugins and features \\(com.glide.system\\_scheduler, com.snc.automation, com.snc.automation\\_time\\_zone, com.glide.stats.scheduler\\) and access Scheduled Jobs dashboard in System Events and Jobs Dashboard plugin \\(com.sn\\_async\\_dashboard\\).\n\n
\n\nPlato Predictive Intelligence\n\n\n\nml\\_admin\n\n\n\nRole required to have access to create and retrain classification, similarity, and clustering models.\n\n
\n\nPlaybook\n\n\n\nplaybook.admin\n\n\n\nRole required to have Playbook Admin access. Contains pd\\_content\\_author, pd\\_operator, pd\\_trigger\\_author, pd\\_author, playbook.localization, and pd\\_cancel.\n\n
\n\nProactive Prompts\n\n\n\nsn\\_pp.admin\n\n\n\nRole required to create and manage all Proactive Prompts configurations and features.\n\n
\n\nProcess Mining\n\n\n\nsn\\_process\\_mining\\_admin\n\n\n\nRole required to have admin access only for Process Mining workspace and can do certain actions limited to process mining only.\n\n
\n\nPublic Sector Digital Services\n\n\n\nsn\\_gsm.admin\n\n\n\nRole required to provide delegated admin access to scoped applications built on the Public Sector Digital Services platform.\n\n
\n\nRole delegation\n\n\n\nrole\\_delegator\\_admin\n\n\n\nRole required for role delegation.\n\n
\n\nRoles\n\n\n\nuser\\_role\\_history\\_admin\n\n\n\nRole required to manage perform specific role related operations.\n\n
\n\nRetail\n\n\n\nsn\\_retail.ro\\_admin\n\n\n\nRole required to create retail organization and add members to the organization.\n\n
\n\nSBOM\n\n\n\nsn\\_sbom\\_core.admin\n\n\n\nRole required to create, read, edit data, and upload Software Bill of Materials \\[SBOMs\\]. This role is required for access to the SBOM Core modules in your instance. It inherits the roles from the Data Model for SBOM application.\n\n
\n\nSearch\n\n\n\nais\\_admin\n\n\n\nRole required to administrate and configure AI Search functionality. Includes Search Applications, Search Profiles, Search Sources, Indexed Sources, and Properties necessary for administrating and configuring AI Search.\n\n
\n\nSearch\n\n\n\nts\\_admin\n\n\n\nRole required to administrate and configure text search on an instance, enabling adjusting of ts\\_weights and viewing or changing properties necessary for Text Search Administration.\n\n
\n\nSearch UX\n\n\n\nais\\_admin\n\n\n\nRole required to migrate admin ACLs to a more granular role for ai-search-admin, semantic\\_search, com.glide.search.analytics, com.glide.search.signal\\_data, and com.glide.signals.\n\n
\n\nSecurity Center\n\n\n\nsn\\_vsc.security\\_center\\_admin\n\n\n\nRole required to have admin access for Security center store application.\n\n
\n\nSecurity Operations - Data Loss Prevention\n\n\n\nsn\\_dlir.admin\n\n\n\nRole required for administrative access to the Data Loss Prevention application.\n\n
\n\nSecurity Operations - Security Incident Response integrations\n\n\n\nsn\\_si.ingestion\\_profile\\_admin\n\n\n\nRole required to configure the plugin and to create, edit, delete, and maintain ingestion profiles.\n\n - Microsoft Azure Sentinel integration\n- Splunk Enterprise Security Event Ingestion integration\n- Splunk Enterprise Event Ingestion integration\n- Cortex XSIAM by Palo Alto Networks\n- Microsoft Defender integration\n- CrowdStrike Next-Gen SIEM integration\n\n
\n\nSecurity Operations - Security Incident Response\n\n\n\nsn\\_si.admin\n\n\n\nRole required for administrative access to the Security Incident Response application.\n\n
\n\nSecurity Operations - Now Assist for Security Incident Response\n\n\n\nsn\\_si.admin\n\n\n\nRole required for administrative access to the Now Assist for Security Incident Response application.\n\n
\n\nSecurity Operations - Threat Intelligence Security Center\n\n\n\nsn\\_sec\\_tisc.admin\n\n\n\nRole required for administrative access to the Threat Intelligence Security Center application.\n\n
\n\nSecurity Posture Control\n\n\n\nSPC Admin Group\n\n\n\nGroup required for full read and write access to all the records for Security Posture Control, including licensing information. Granular roles for this group include: \\[sn\\_sec\\_caasm.analyst, sn\\_sec\\_caasm.caasm\\_security\\_admin, and sn\\_sec\\_spc\\_core.configure\\].\n\n
\n\nService Applicant Information\n\n\n\nsn\\_svc\\_appl\\_info.admin\n\n\n\nRole required to provide delegated admin access to the Service Applicant Information application.\n\n
\n\nService Applicant Program Management\n\n\n\nsn\\_svc\\_appl\\_pgm\\_mg.admin\n\n\n\nRole required to provide delegated admin access to the Service Applicant Program Management application.\n\n
\n\nService Catalog\n\n\n\ncatalog\\_admin\n\n\n\nRole required to manage the Service Catalog application, including catalogs, categories, and items, but not including scripting functions available to administrators.\n\n
\n\nService Graph Connectors\n\n\n\nadmin\n\n\n\nRole required to install and upgrade Service Graph Connectors, including API Service Graph Connectors. Admin users can create a connection, configure connection properties, monitor connections and data imports, run background scripts, and provide access to tables in the global scope.\n\n
\n\nService Graph Connectors\n\n\n\nsn\\_cmdb\\_int\\_util.sgc\\_admin\n\n\n\nRole required to create, update, and delete connections, configure connectors using the guided setup, and read and write system properties.\n\n
\n\nService Graph Connectors\n\n\n\ncmdb\\_inst\\_admin\n\n\n\nRole required to read all Service Graph Connector application modules, read and write system properties, and read records that are owned by other applications and are related to the functionality of Service Graph Connectors. Users with this role can create, update, and delete custom tables, scheduled imports, and data sources.\n\n
\n\nService Level Management\n\n\n\nsla\\_admin\n\n\n\nRole required to configure Service Level Management features and system properties.\n\n
\n\nServiceNow Studio\n\n\n\nsn\\_udc.admin\n\n\n\nRole required to - Manage all ServiceNow Studio system properties, settings, and configurations.\n- Manage roles and permissions specific to ServiceNow Studio.\n- Configure the experience switcher roles across Creator Studio, ServiceNow Studio, and ServiceNow IDE.\n\n
\n\nServiceNow Studio\n\n\n\nsn\\_prfrd\\_tables.admin\n\n\n\nRole required to configure preferred tables in your instance for Table Builder.\n\n
\n\nServiceNow Vault\n\n\n\nsn\\_vault\\_console.vault\\_console\\_admin\n\n\n\nRole required to have a collection of Data Classification admin, Data Privacy admin, and CA Admin roles to execute a template flow and monitor sensitive data. To learn more, see [Configuring ServiceNow Vault](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/configuring-servicenow-vault.md)\n\n
\n\nServiceNow Vault\n\n\n\nsn\\_vault\\_console.vault\\_console\\_auditor\n\n\n\nRole required to have a collection of Data Discovery Auditor, Data Classification Auditor, Data Privacy Auditor, and Continuous Auth Auditor roles to view the policies and metrics related to ServiceNow Vault.\n\n
\n\nServiceNow for Teams – Core\n\n\n\nsn\\_now\\_teams.admin\n\n\n\nRole required to manage ServiceNow for Teams configurations, including system properties, Virtual Agent configuration, manifest settings, UI actions, and table-level ACLs.\n\n
\n\nSkills Foundation\n\n\n\nsn\\_skills\\_int.admin\n\n\n\nRole required to configure system settings with complete access to all the Skills Foundation features and functionality related to the employee.\n\n
\n\nSkills Foundation\n\n\n\nsn\\_skills\\_int.job\\_arch\\_admin\n\n\n\nRole required to view, create, update, remove, and configure the job architecture data.\n\n
\n\nSmart Operations\n\n\n\nsn\\_smartops.admin\n\n\n\nRole required to serve as the Super Admin for Smart Operations. Has full privileges to perform all CRUD \\(Create, Read, Update, Delete\\) operations across Smart Operations tables, APIs, and data brokers.\n\n
\n\nSocial Benefits Playbook\n\n\n\nsn\\_gsm\\_soc\\_bnfts.admin\n\n\n\nRole required to provide delegated admin access to the License and Permit Playbook application.\n\n
\n\nSystem Engineering Core\n\n\n\nopenstack\\_admin\n\n\n\nRole required to have full administrative access to OpenStack compute, storage, and network.\n\n
\n\nSystem Engineering Core\n\n\n\nvcenter\\_admin\n\n\n\nRole required to have full administrative access to vCenter: VMs, clusters, storage, and hosts.\n\n
\n\nSystem Logs \\(Log Entry\\)\n\n\n\nsyslog\\_admin\n\n\n\nProvides create/write access to Log Entry \\(syslog\\) records. The previous admin role ACL bindings on the syslog table are deleted and replaced with these new granular roles.\n\n
\n\nTalent Feedback\n\n\n\nsn\\_tf.admin\n\n\n\nRole require to manage and configure all Talent Feedback modules.\n\n
\n\nTask Mining\n\n\n\nsn\\_tm\\_core.admin\n\n\n\nRole required to have admin access for Process mining application.\n\n
\n\nThird-party risk management\n\n\n\nsn\\_vdr\\_risk\\_asmt.vendor\\_risk\\_admin\n\n\n\nRole required to have admin access for third-party risk management.\n\n
\n\nTransaction Part Metrics Logs\n\n\n\ntxn\\_part\\_metrics\\_admin\n\n\n\nProvides create, write, and delete access to the syslog\\_transaction\\_part\\_metrics table. The previous admin role ACL bindings on this table are deleted and replaced with these new granular roles. New ACLs for all five operations \\(read, create, write, delete, report\\_view\\) are introduced, each gated by the appropriate new role.\n\n
\n\nTSOM Visibility\n\n\n\ntsom\\_visibility\\_admin\n\n\n\nRole required to manage the operational tasks for the TSOM Visibility application.\n\n
\n\nTSOM Assurance\n\n\n\ntsom\\_assurance\\_admin\n\n\n\nRole required to manage the operation tasks \\(includes administration\\) for the TSOM Assurance.\n\n
\n\nUI Builder\n\n\n\nui\\_builder\\_admin\n\n\n\nRole required to have admin access for UI Builder.\n\n
\n\nUsage Analytics\n\n\n\nusage\\_admin\n\n\n\nRole required to have admin access for usage analytics.\n\n
\n\nUniversal Request\n\n\n\nsn\\_uni\\_req.ur\\_admin\n\n\n\nRole required to setup and configure Universal Request.\n\n
\n\nUniversal Task\n\n\n\nsn\\_uni\\_task.admin\n\n\n\nRole required to have full administrator access to Universal Task — configure task types, templates, and settings.\n\n
\n\nUniversal Task\n\n\n\nsn\\_uni\\_task.emp\\_form\\_admin\n\n\n\nRole required to manage employee forms.\n\n
\n\nUsage Insights\n\n\n\nanalytics\\_admin\n\n\n\nRole required to have admin access for Usage Insights.\n\n
\n\nUser Experience-Scope\n\n\n\nsn\\_cda.analytics\\_admin\n\n\n\nRole required to have access to User Experience resources as Scope app admin.\n\n
\n\nVulnerability Response\n\n\n\nsn\\_vul.vulnerability\\_admin\n\n\n\nRole required for complete access to the Vulnerability Response \\(VR\\) application and its records. Users with this role configure all VR applications and rules and can install third-party integrations.\n\n
- **[Platform security granular admin roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/platsec-granular-roles.md)** \nUse granular admin roles to verify access management by assigning roles that define user permissions and responsibilities.\n\n"}}