Roles installed with Privacy Management

The GRC: Privacy Management application installs the roles for the privacy analyst, the privacy manager, and the privacy administrator to perform their respective tasks.

Role title [name]	Description	Contains roles
Privacy Analyst[sn_privacy.analyst]	Privacy analysts are responsible for managing the privacy compliance posture of the processing activities owned by them. They perform the following tasks:- Assess the processing activities regularly by sending and reviewing privacy impact assessments. Work with the management and business users to identify and manage controls related to a processing activity. Manage and resolve the concerns of business users about compliance-related issues and policy exceptions. Test and monitor control effectiveness.	sn_grc_workspace.task_reader sn_compliance.policy_user sn_compliance.library_user sn_compliance.control_framework_user sn_smart_asmt.template_reader sn_privacy.business_user sn_risk.implementation_user sn_risk.library_user sn_privacy_case.privacy_case_analyst If the sn_risk_advanced plugin is active: sn_risk_advanced.ara_approver sn_risk_advanced.ara_assessor If the sn_prm_gen_ai plugin is active: sn_reco_template.rationalization_process_writer If the sn_reg_body_mgmt plugin is active: sn_reg_body_mgmt.reader If the sn_smart_asmt plugin is active: sn_smart_asmt.assessment_reader
Privacy Manager[sn_privacy.manager]	Privacy managers are responsible for managing the overall organization level privacy compliance posture. They perform the following tasks:- Develop and implement privacy regulations, authority documents, and policies. Review privacy regulatory requirements and policies. Design and monitor controls to deal with violations of privacy regulations and internal policies. Plan privacy programs and scope entities. Create privacy impact assessment templates. Continuously monitor control effectiveness and recommend effective improvements. Supervise the privacy compliance team. Report to management and the Board of Directors on compliance posture. Discover who is implementing privacy regulation for the first time in their organization.	sn_privacy.analyst sn_grc_workspace.task_admin sn_compliance.attestation_creator sn_privacy_case.privacy_case_manager sn_compliance.control_framework_manager sn_compliance.library_manager sn_compliance.policy_manager sn_risk.implementation_manager sn_risk.library_manager sn_smart_asmt.template_contributor sn_smart_asmt.template_manager If the sn_grc_pdr plugin is active: sn_grc_pdr.pdr_manager If the sn_privacy_content plugin is active: sn_esg_content.admin If the sn_prm_gen_ai plugin is active: sn_smart_imp_auto.automation_reader If the sn_grc_reg_change plugin is active: sn_grc_reg_change.manager If the sn_grc_ent_access plugin is active: sn_grc_ent_access.reader If the sn_reg_body_mgmt plugin is active: sn_reg_body_mgmt.writer If the sn_smart_asmt plugin is active: sn_smart_imp_auto.automation_reader
Privacy Admin[sn_privacy.admin]	Privacy administrators administer the privacy policy and compliance management. Users assigned this role are responsible for configuring privacy management solutions as per the privacy team's requirements. They perform the following tasks:- Configure privacy impact assessments and automated flows to trigger assessments Configure rules to auto-create processing activities out of privacy screening assessments. Monitor the ServiceNow AI Platform dependencies with other applications and modules. Can read the scripts under Processing activity script configurations related list.	sn_privacy.manager sn_risk_advanced.ara_admin sn_privacy_case.privacy_case_admin sn_compliance.control_framework_admin sn_compliance.library_admin sn_compliance.policy_admin sn_grc_workspace.assessment_template_configuration_writer sn_smart_asmt.assessment_admin If the sn_grc_pdr plugin is active: sn_grc_pdr.pdr_admin If the sn_grc_ent_access plugin is active: sn_grc_ent_access.admin sn_grc_ent_access.bulk_access_config_admin If the sn_smart_asmt plugin is active: sn_smart_imp_auto.automation_creator
Privacy assessment responder [sn_privacy.assessment_responder]	Privacy assessment responders can respond to the privacy assessments as key stakeholders. They can also raise privacy requests from the portal.	sn_grc_workspace.task_reader canvas_user sn_grc_workspace.assessment_template_configuration_reader sn_grc_workspace.user If the sn_smart_asmt plugin is active: sn_smart_asmt.actor
Privacy business user [sn_privacy.business_user]	Privacy business users can edit the assigned processing activities in the Discover state, and also respond to the assessments.	sn_grc_workspace.task_reader canvas_user sn_privacy_case.privacy_case_business_user sn_compliance.control_framework_business_user sn_compliance.library_business_user sn_compliance.policy_business_user sn_grc_workspace.assessment_template_configuration_reader sn_grc_workspace.user sn_risk.implementation_business_user sn_smart_asmt.actor sn_smart_asmt.assessment_reader If the sn_risk_advanced plugin is active: sn_risk_advanced.ara_reader
Privacy developer [sn_privacy.developer]	Privacy developers can write custom scripts	sn_privacy.admin sn_compliance.compliance_shared_developer sn_grc.grc_shared_developer
If the Privacy Employee User application is installed, then the following roles are available.
Privacy employee user [sn_privacy_emp.privacy_employee]	Enables your employees to perform the following operations from the Employee Center: - Proactively request privacy impact assessments (PIAs) for new implementations, applications, and processes from the Employee Center. Report privacy cases related to data privacy policy and regulatory violations. Read and acknowledge organizational privacy policies Create policy exceptions. Create privacy issues.	sn_grc.issue_employee_user sn_compliance.policy_ack_employee_user sn_compliance.policy_exception_employee_user
If the GRC: Privacy Lite User application is installed, then the following roles are considered as lite operators.
sn_privacy.assessment_responder sn_privacy_case.privacy_case_business_user sn_privacy.business_user sn_grc_pdr.data_owner_admin	Users with the lite operator role can do the following: Respond to privacy assessment tasks as business users. Work on the processing activity as a business user when it’s assigned to you to collect the required details. Respond to the processing activity's criticality risk assessments and object-based assessment. Respond to the detailed privacy risk assessments on each risk identified on a processing activity. Work on breach assessments and other privacy case tasks. Respond to the assessment and investigation tasks assigned by the privacy team. Work on personal data rights action tasks to handle data according to the requester's requests. Respond to the assigned control attestations. View, update, and close assigned issues. Create, update, and close assigned remediation tasks. Respond to the assigned manual indicator tasks.

**Parent Topic:**[Privacy Management reference](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/privacy-workspace/privacy-mgmt-reference.md)