Granular admin roles

reference australia Updated Sep 10, 2026 1 min read granular-admin-roles.md
Raw file servicenow.com

Granular admin roles enable organizations to assign specific administrative permissions based on functional responsibilities, replacing broad admin access with targeted role assignments.

The following table describes the granular admin roles that the administrator can assign to the internal users.

Role name

Description

Inherited by

Inherits

sn_bus_loc.business_org_admin

Provides CRUD access to all Service Model Foundation tables

No

  • sn_service_org.service_org_admin
  • sn_bus_loc.ibl_writer
  • sn_bus_loc.ebl_viewer
  • sn_bus_loc.ibl_viewer
  • sn_bus_loc.writer

sn_service_org.service_org_admin

Provides all CRUD access to service organization entities, which come under Service Model Foundation flows

sn_bus_loc.business_org_admin

  • sn_service_org.viewer
  • sn_service_org.writer
  • sn_service_org.service_org_delete
  • sn_service_org.service_org_external_staff_create
  • sn_service_org.service_org_external_staff_read
  • sn_service_org.service_org_external_staff_write
  • sn_service_org.service_org_external_staff_delete
  • sn_service_org.service_org_assignment_group_create
  • sn_service_org.service_org_assignment_group_read
  • sn_service_org.service_org_assignment_group_write
  • sn_service_org.service_org_assignment_group_delete
  • sn_service_org.service_org_criteria_create
  • sn_service_org.service_org_criteria_read
  • sn_service_org.service_org_criteria_write
  • sn_service_org.service_org_criteria_delete
  • sn_service_org.service_org_customer_criteria_create
  • sn_service_org.service_org_customer_criteria_read
  • sn_service_org.service_org_customer_criteria_write
  • sn_service_org.service_org_customer_criteria_delete
  • sn_service_org.service_criteria_write
  • sn_service_org.service_criteria_delete
  • sn_service_org.service_criteria_read
  • sn_service_org.service_criteria_create

sn_csm_ocs.csm_ocs_admin

Provide full CRUD access to Outsourced Customer Service flow

No

sn_service_org.service_external_staff.create sn_service_org.service_external_staff.read sn_service_org.service_external_staff.write sn_service_org.service_external_staff.delete sn_contractor.outsourced_service_provider_create sn_contractor.outsourced_service_provider_read sn_contractor.outsourced_service_provider_write sn_contractor.outsourced_service_provider_delete sn_contractor.outsourced_service_provider_criteria_create sn_contractor.outsourced_service_provider_criteria_read sn_contractor.outsourced_service_provider_criteria_write sn_contractor.outsourced_service_provider_criteria_delete sn_csm_ocs.sn_csm_ocs_case_transfer_request_create sn_csm_ocs.sn_csm_ocs_case_transfer_request_read sn_csm_ocs.sn_csm_ocs_case_transfer_request_write sn_csm_ocs.sn_csm_ocs_case_transfer_request_delete

## Other granular admin roles for Service Model Foundation configuration

The following are the roles required to perform Service Model Foundation (SMF) configuration tasks:

Role name Description Plugin(s) required
sn_queryrules.admin Provides admin access to all query rules. com.snc.query_rules
user_admin Administers users, groups, locations, and companies. None
service_definition_admin Provides full CRUD access to the service definition and related tables None
sn_crm_account_relationship_data_manager Extends the sn_crm_account_data_manager role by granting additional admin access to account relationships. cs_base
sn_crm_consumer_relationship_data_manager Extends the sn_crm_consumer_data_manager role by granting additional admin access to consumer relationships. cs_base
sn_crm_household_relationship_data_manager Extends the sn_crm_household_data_manager role by granting additional admin access to household relationships.It also contains sn_crm_consumer_relationship_data_manager role. com.snc.cs_base/if/com.snc.household/
Search documentation
Search document titles and file paths on the australia branch