Components installed with ITSM Roles - Change Management
Several user roles are installed with the activation of the ITSM Roles - Change Management plugin (com.snc.itsm.roles.change_management). Security ACLs to support the security model for Change Management and related functionality are also installed.
When you install the ITSM Roles — Change Management plugin (com.snc.itsm.roles.change_management), the plugin updates the Security Access Control Lists (ACLs), integrating revised scripts, and other files to overhaul the security model for these applications.
Note: The Application Files table lists the components that are installed with this application. For instructions on how to access this table, see Find components installed with an application.
Roles installed
|
Role title [name] |
Description |
Contains roles |
|---|---|---|
|
Change admin[sn_change_admin] |
Provides configuration and authorization access for system properties in the Change Management application. Provides a granular, application-specific write access replacing the global admin role. |
|
|
|
|
|
|
Change read[sn_change_read] |
Read access to the Change Management application and related records.Note: A user with the sn_change_read role can view all change requests and the CAB Workbench. |
|
|
Change write[sn_change_write] |
Write access to the Change Management application and related records. |
|
|
Incident read[sn_incident_read] |
Read access to the Incident Management application and related records.Note: An ESS user (user with no role) can view only those incidents that they create or someone else creates on their behalf. A user with the sn_incident_read role can view all incidents as well as the major incident workbench. |
|
|
Incident write[sn_incident_write] |
Write access to the Incident Management application and related records. |
|
|
Problem read[sn_problem_read] |
Read access to the Problem Management application and related records. |
NA |
|
Problem write[sn_problem_write] |
Write access to the Problem Management application and related records. |
|
|
sn_request_read |
Read access to the Request [sc_request] or Requested Item [sc_req_item] only for a user who is also an approver of the request or requested item.Note: As there are future updates expected for the sn_request_read role, do not assign it to users without the business_stakeholder role. |
NA |
|
sn_request_write |
Write access to the Request [sc_request] or Requested Item [sc_req_item]. |
|
|
sn_request_comment_write |
Write access to the comments for the Requested Item [sc_req_item].Note: The sn_request_comment_write role alone doesn't provide write access to comments. You also need write access to the table. |
NA |
|
[sn_service_desk_agent] |
Enables tier 1 service desk agents to gather and verify information and to deliver quick resolutions. This user role is available when the ITSM Roles plugin (com.snc.itsm.roles) is installed. |
With the installation of the ITSM Gen AI (com.sn.itsm.gen.ai) plugin, the following roles are also available:
|
--- title: Components installed with ITSM Roles - Change Management description: Several user roles are installed with the activation of the ITSM Roles - Change Management plugin \(com.snc.itsm.roles.change\_management\). Security ACLs to support the security model for Change Management and related functionality are also installed. locale: en-US canonical_url: https://www.servicenow.com/docs/r/australia/it-service-management/change-management/installed-with-cm-itsm-roles.html release: australia product: Change Management classification: change-management topic_type: reference last_updated: "2026-09-10" reading_time_minutes: 2 breadcrumb: [Request ITSM Roles - Change Management, Change Management plugins, Configure, Change Management, IT Service Management] --- # Components installed with ITSM Roles - Change Management Several user roles are installed with the activation of the ITSM Roles - Change Management plugin \(com.snc.itsm.roles.change\_management\). Security ACLs to support the security model for Change Management and related functionality are also installed. When you install the ITSM Roles — Change Management plugin \(com.snc.itsm.roles.change\_management\), the plugin updates the Security Access Control Lists \(ACLs\), integrating revised scripts, and other files to overhaul the security model for these applications. **Note:** The Application Files table lists the components that are installed with this application. For instructions on how to access this table, see [Find components installed with an application](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-administration/find-components.md). ## Roles installed <table id="table_u1t_gb1_wdb"><thead><tr><th> Role title \[name\] </th><th> Description </th><th> Contains roles </th></tr></thead><tbody><tr><td> Change admin\[sn\_change\_admin\] </td><td> Provides configuration and authorization access for system properties in the Change Management application. Provides a granular, application-specific write access replacing the global admin role. </td><td> - sn\_change\_write - sn\_change\_cab.cab\_manager - change\_manager </td></tr><tr><td> </td><td> </td><td> </td></tr><tr><td> Change read\[sn\_change\_read\] </td><td> Read access to the Change Management application and related records.**Note:** A user with the sn\_change\_read role can view all change requests and the CAB Workbench. </td><td> - sn\_cmdb\_user - dependency\_views - view\_changer - cmdb\_read - app\_service\_user - cmdb\_query\_builder\_read </td></tr><tr><td> Change write\[sn\_change\_write\] </td><td> Write access to the Change Management application and related records. </td><td> - sn\_change\_read - template\_editor - cmdb\_query\_builder </td></tr><tr><td> Incident read\[sn\_incident\_read\] </td><td> Read access to the Incident Management application and related records.**Note:** An ESS user \(user with no role\) can view only those incidents that they create or someone else creates on their behalf. A user with the sn\_incident\_read role can view all incidents as well as the major incident workbench. </td><td> - dependency\_views - agent\_workspace\_user - view\_changer - cmdb\_read - cmdb\_query\_builder\_read </td></tr><tr><td> Incident write\[sn\_incident\_write\] </td><td> Write access to the Incident Management application and related records. </td><td> - sn\_incident\_read - template\_editor </td></tr><tr><td> Problem read\[sn\_problem\_read\] </td><td> Read access to the Problem Management application and related records. </td><td> NA </td></tr><tr><td> Problem write\[sn\_problem\_write\] </td><td> Write access to the Problem Management application and related records. </td><td> - sn\_problem\_read - template\_editor </td></tr><tr><td> sn\_request\_read </td><td> Read access to the Request \[sc\_request\] or Requested Item \[sc\_req\_item\] only for a user who is also an approver of the request or requested item.**Note:** As there are future updates expected for the sn\_request\_read role, do not assign it to users without the business\_stakeholder role. </td><td> NA </td></tr><tr><td> sn\_request\_write </td><td> Write access to the Request \[sc\_request\] or Requested Item \[sc\_req\_item\]. </td><td> - task\_editor - dependency\_views - agent\_workspace\_user - view\_changer - cmdb\_read - cmdb\_query\_builder\_read - sn\_request\_read </td></tr><tr><td> sn\_request\_comment\_write </td><td> Write access to the comments for the Requested Item \[sc\_req\_item\].**Note:** The sn\_request\_comment\_write role alone doesn't provide write access to comments. You also need write access to the table. </td><td> NA </td></tr><tr><td> \[sn\_service\_desk\_agent\] </td><td> Enables tier 1 service desk agents to gather and verify information and to deliver quick resolutions. This user role is available when the ITSM Roles plugin \(com.snc.itsm.roles\) is installed. </td><td> - sn\_incident\_write - sn\_problem\_write - sn\_change\_write - sn\_request\_write - tracked\_file\_reader With the installation of the ITSM Gen AI \(com.sn.itsm.gen.ai\) plugin, the following roles are also available: - knowledge\_user - now\_assist\_panel\_user </td></tr></tbody> </table>**Parent Topic:**[Request ITSM Roles - Change Management](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-service-management/change-management/request-itsm-roles-cm.md)
| title | Components installed with ITSM Roles - Change Management |
| description | Several user roles are installed with the activation of the ITSM Roles - Change Management plugin \(com.snc.itsm.roles.change\_management\). Security ACLs to support the security model for Change Management and related functionality are also installed. |
| locale | en-US |
| canonical_url | https://www.servicenow.com/docs/r/australia/it-service-management/change-management/installed-with-cm-itsm-roles.html |
| release | australia |
| product | Change Management |
| classification | change-management |
| topic_type | reference |
| last_updated | 2026-09-10 |
| reading_time_minutes | 2 |
| breadcrumb | Request ITSM Roles - Change ManagementChange Management pluginsConfigureChange ManagementIT Service Management |