Create a role
Create a role to control access to features and capabilities in applications and modules. The new role doesn’t have access to any application or module until you add other roles to it, or add it to the appropriate applications and modules.
Before you begin
Role required: admin
About this task
After access has been granted to a role, all groups or users assigned to the role are granted the access. Roles can contain other roles, and any access granted to a role is granted to any role that contains it.
For a complete list of the roles included with the base instance, see Base system roles
Note:
You can’t rename roles of any kind in the ServiceNow AI Platform. If you manually create a role, you can’t rename it after you save it.
Move this action to the background so you aren’t waiting when adding a number of group members by adding the system property glide.ui.schedule_slushbucket_save_for_group_roles. Set the system property to true. The system user is used to create records or update existing ones since the action is running in the background.
Procedure
Navigate to All > User Administration > Roles and create a record.
Complete the form.
| Field | Description |
|---|---|
| Name | Enter a name for the role. |
| Requires Subscription | Indicates whether users with this role require a subscription to stay in compliance. - Yes Measured-role that requires a subscription. You can allocate subscriptions to users with this role by adding one or more groups to a product subscription. To learn more, see Managing per-user subscriptions in Subscription Management.
Not a measured-role.
Neither |
| Application | Select the application that contains this record. |
| Elevated privilege | A role that requires elevated privilege can’t be assigned to a user at login by the system. Instead, a user must manually elevate privileges to receive the elevated role. Select this option to mark this role as required to elevate it to high security. See Elevated privilege roles for more information. |
| Description | Select the roles to delegate to the group member. |
- Grant a role access to applications and modules
Roles control access to features and capabilities in applications and modules. You add a role to an application or module to enable the role to grant access to the application or module for all users with the role. - Assign a role to a group
You can assign a role to a group to grant access to applications and modules to group members. - Assign a role to a user
A user inherits roles from all groups to which they belong. You can also assign roles directly to a user. Whenever a user is assigned a new role, it only takes effect after logging in with a new session. - Add a role to an existing role
When you add a new role to an existing role for a user, the user inherits the access that is granted by the new role. - Create a group role
Create a group role to control access to features and capabilities in applications for all members in a group.
Parent Topic:Managing roles