— title: Roles installed with Privacy Management description: The GRC: Privacy Management application installs the roles for the privacy analyst, the privacy manager, and the privacy administrator to perform their respective tasks. locale: en-US canonical_url: www.servicenow.com/docs/r/australia/governance-risk-compliance/privacy-workspace/roles-installed-prm.html release: australia product: Privacy Workspace classification: privacy-workspace topic_type: reference last_updated: “2026-09-10” reading_time_minutes: 3

breadcrumb: [Reference, Privacy Management, Governance, Risk, and Compliance]

Roles installed with Privacy Management

The GRC: Privacy Management application installs the roles for the privacy analyst, the privacy manager, and the privacy administrator to perform their respective tasks.

<table id=“table_m2t_czq_mqb”><thead><tr><th>

Role title [name]

</th><th>

Description

</th><th>

Contains roles

</th></tr></thead><tbody><tr><td>

Privacy Analyst

</td><td>

Privacy analysts are responsible for managing the privacy compliance posture of the processing activities owned by them.​ They perform the following tasks:- Assess the processing activities regularly by sending and reviewing privacy impact assessments​. - Work with the management and business users to identify and manage controls related to a processing activity​. - Manage and resolve the concerns of business users about compliance-related issues and policy exceptions​. - Test and monitor control effectiveness​.

​

</td><td>

• sn_grc_workspace.task_reader

• sn_compliance.policy_user

• sn_compliance.library_user

• sn_compliance.control_framework_user

• sn_smart_asmt.template_reader

• sn_privacy.business_user

• sn_risk.implementation_user

• sn_risk.library_user

• sn_privacy_case.privacy_case_analyst

If the sn_risk_advanced plugin is active:

• sn_risk_advanced.ara_approver

• sn_risk_advanced.ara_assessor

If the sn_prm_gen_ai plugin is active: sn_reco_template.rationalization_process_writer

If the sn_reg_body_mgmt plugin is active: sn_reg_body_mgmt.reader

If the sn_smart_asmt plugin is active: sn_smart_asmt.assessment_reader

</td></tr><tr><td>

Privacy Manager

</td><td>

Privacy managers are responsible for managing the overall organization level privacy compliance posture.​ They perform the following tasks:- Develop and implement privacy regulations, authority documents,​ and policies. - Review privacy regulatory requirements and policies​. - Design and monitor controls to deal with violations of privacy regulations and internal policies.​- Plan privacy programs and scope entities. - Create privacy impact assessment templates.​- Continuously monitor control effectiveness and recommend effective improvements. - ​ Supervise the privacy compliance team.​- Report to management and the Board of Directors on compliance posture​. - Discover who is implementing privacy regulation for the first time in their organization.

</td><td>

• sn_privacy.analyst

• sn_grc_workspace.task_admin

• sn_compliance.attestation_creator

• sn_privacy_case.privacy_case_manager

• sn_compliance.control_framework_manager

• sn_compliance.library_manager

• sn_compliance.policy_manager

• sn_risk.implementation_manager

• sn_risk.library_manager

• sn_smart_asmt.template_contributor

• sn_smart_asmt.template_manager

If the sn_grc_pdr plugin is active: sn_grc_pdr.pdr_manager

If the sn_privacy_content plugin is active: sn_esg_content.admin

If the sn_prm_gen_ai plugin is active: sn_smart_imp_auto.automation_reader

If the sn_grc_reg_change plugin is active: sn_grc_reg_change.manager

If the sn_grc_ent_access plugin is active: sn_grc_ent_access.reader

If the sn_reg_body_mgmt plugin is active: sn_reg_body_mgmt.writer

If the sn_smart_asmt plugin is active: sn_smart_imp_auto.automation_reader

</td></tr><tr><td>

Privacy Admin

</td><td>

Privacy administrators administer the privacy policy and compliance management. ​ Users assigned this role are responsible for configuring privacy management solutions as per the privacy team’s requirements.​ They perform the following tasks:- Configure privacy impact assessments and automated flows to trigger assessments​- Configure rules to auto-create processing activities ​out of privacy screening assessments. - Monitor the ServiceNow AI Platform dependencies with other applications and modules. - Can read the scripts under Processing activity script configurations related list.

​

</td><td>

• sn_privacy.manager

• sn_risk_advanced.ara_admin

• sn_privacy_case.privacy_case_admin

• sn_compliance.control_framework_admin

• sn_compliance.library_admin

• sn_compliance.policy_admin

• sn_grc_workspace.assessment_template_configuration_writer

• sn_smart_asmt.assessment_admin

If the sn_grc_pdr plugin is active: sn_grc_pdr.pdr_admin

If the sn_grc_ent_access plugin is active:

• sn_grc_ent_access.admin

• sn_grc_ent_access.bulk_access_config_admin

If the sn_smart_asmt plugin is active: sn_smart_imp_auto.automation_creator

</td></tr><tr><td>

Privacy assessment responder [sn_privacy.assessment_responder]

</td><td>

Privacy assessment responders can respond to the privacy assessments as key stakeholders. They can also raise privacy requests from the portal.

</td><td>

• sn_grc_workspace.task_reader

• canvas_user

• sn_grc_workspace.assessment_template_configuration_reader

• sn_grc_workspace.user

If the sn_smart_asmt plugin is active: sn_smart_asmt.actor

</td></tr><tr><td>

Privacy business user [sn_privacy.business_user]

</td><td>

Privacy business users can edit the assigned processing activities in the Discover state, and also respond to the assessments.

</td><td>

• sn_grc_workspace.task_reader

• canvas_user

• sn_privacy_case.privacy_case_business_user

• sn_compliance.control_framework_business_user

• sn_compliance.library_business_user

• sn_compliance.policy_business_user

• sn_grc_workspace.assessment_template_configuration_reader

• sn_grc_workspace.user

• sn_risk.implementation_business_user

• sn_smart_asmt.actor

• sn_smart_asmt.assessment_reader

If the sn_risk_advanced plugin is active: sn_risk_advanced.ara_reader

</td></tr><tr><td>

Privacy developer [sn_privacy.developer]

</td><td>

Privacy developers can write custom scripts

</td><td>

• sn_privacy.admin

• sn_compliance.compliance_shared_developer

• sn_grc.grc_shared_developer

</td></tr><tr><td class=“sub-head” colspan=“3”>

If the Privacy Employee User application is installed, then the following roles are available.

</td></tr><tr><td>

Privacy employee user [sn_privacy_emp.privacy_employee]

</td><td>

Enables your employees to perform the following operations from the Employee Center: - Proactively request privacy impact assessments (PIAs) for new implementations, applications, and processes from the Employee Center. - Report privacy cases related to data privacy policy and regulatory violations. - Read and acknowledge organizational privacy policies - Create policy exceptions. - Create privacy issues.

</td><td>

• sn_grc.issue_employee_user

• sn_compliance.policy_ack_employee_user

• sn_compliance.policy_exception_employee_user

</td></tr><tr><td class=“sub-head” colspan=“3”>

If the GRC: Privacy Lite User application is installed, then the following roles are considered as lite operators.

</td></tr><tr><td>

• sn_privacy.assessment_responder

• sn_privacy_case.privacy_case_business_user

• sn_privacy.business_user

• sn_grc_pdr.data_owner_admin

</td><td>

Users with the lite operator role can do the following:

• Respond to privacy assessment tasks as business users.

• Work on the processing activity as a business user when it’s assigned to you to collect the required details.

• Respond to the processing activity’s criticality risk assessments and object-based assessment.

• Respond to the detailed privacy risk assessments on each risk identified on a processing activity.

• Work on breach assessments and other privacy case tasks.

• Respond to the assessment and investigation tasks assigned by the privacy team.

• Work on personal data rights action tasks to handle data according to the requester’s requests.

• Respond to the assigned control attestations.

• View, update, and close assigned issues.

• Create, update, and close assigned remediation tasks.

• Respond to the assigned manual indicator tasks.

</td><td>

</td></tr></tbody> </table>Parent Topic:Privacy Management reference