Roles for performing advanced risk assessment

roles-for-ara.md
Raw file

When you integrate advanced risk assessment with other applications, you must ensure the users have the necessary roles to perform and approve the assessments.

Starting with version 14.1.2, several new roles have been introduced to enable users of other applications to successfully use the advanced risk assessments feature. These independent roles have been created to provide the users the required ability to perform advanced risk assessment without requiring the Integrated Risk Management specific roles such as Risk admin, GRC Business User.

Note: You must manually assign the advanced risk assessment roles to the sn_grc.business_user role. To understand how you can adjust granting of roles and groups, see the How to adjust granting of roles and groups to use background jobs [KB0963693] article in the Now Support Knowledge Base. To understand more about the GRC business user role, see the GRC Business User [KB0864247] article in the Now Support Knowledge Base article in the Now Support Knowledge Base. You must log in to Now Support to view the article.

Role title [name]

Contained under

Description

Contains roles

sn_risk_advanced.ara_admin

sn_risk.admin, sn_grc.admin, sn_compliance.admin, sn_grc.sn_grc_system_admin

Users with this role can:- Create risk assessment methodologies

  • Create and manage factors
  • sn_risk_advanced.ara_creator
  • sn_risk_advanced.ara_assessor
  • sn_risk_advanced.ara_approver
  • sn_risk_advanced.ara_reader
  • sn_risk_advanced.ara_planner

sn_risk_advanced.ara_creator

sn_risk.user

Users with this role can create object assessments.

sn_risk_advanced.ara_reader

sn_risk_advanced.ara_assessor

sn_risk.user, sn_risk_advanced.ara_admin, sn_risk_advanced.risk_identification_owner

Users with role can:- Take assessments

  • Perform assessment related actions such as taking the assessment and responding to or reassigning the assessment

sn_risk_advanced.ara_reader

sn_risk_advanced.ara_approver

sn_risk.user, sn_risk_advanced.ara_admin, sn_risk_advanced.risk_identification_owner

Users with role can perform assessment related actions such as approving the assessment.

sn_risk_advanced.ara_reader

sn_risk_advanced.ara_planner

sn_risk_advanced.ara_admin

Users with this role can reassign one or more in-progress risk assessments to a different assessor from the In Progress Assessments list.

sn_risk_advanced.ara_creator, sn_risk_advanced.ara_reader

sn_risk_advanced.ara_reader

sn_risk.reader, sn_risk_advanced.ara_admin, sn_risk_advanced.ara_approver, sn_risk_advanced.ara_assessor, sn_risk_advanced.ara_creator, sn_risk_advanced.ara_planner, sn_risk_advanced.risk_identification_admin

Users with role can read all the information on a risk assessment instance. Users with this role have read access to all tables within advanced risk assessment. If there are users who only need to have access to reports, they can use this role.

 

sn_risk_advanced.qualitative_risk_appetite_reader

sn_risk.reader

Users can view the qualitative risk appetite fields.

 

sn_risk_advanced.quantitative_risk_appetite_reader

sn_risk.user

Users can view the quantitative risk appetite fields.

 

**Parent Topic:**[Components installed with Advanced Risk](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/grc-risk-management-workspace/components-risk-advanced.md)
Search documentation
Search document titles and file paths on the australia branch