DevOps Config roles

reference australia Updated Sep 10, 2026 1 min read devops-config-roles.md
Raw file servicenow.com

DevOps Config uses these roles.

Important: Starting with the Washington D.C. release, DevOps Config is being prepared for future deprecation. It will be hidden and no longer activated on new instances but will continue to be supported.

Role title [name]

Description

Contains Roles

[sn_devops.app_admin]

DevOps Config app admin

Can create/read/update/delete DevOps Config apps.

None

[sn_devops_config.viewer]

DevOps Config viewer

Has read-only access in DevOps Config.

sn_cdm.cdm_viewer

[sn_devops_config.editor]

DevOps Config editor

Can manage config data, create/commit changesets, and publish/unpublish snapshots.

  • sn_devops_config.viewer
  • sn_cdm.cdm_editor

[sn_devops_config.secrets]

DevOps Config secrets

Able to manage encrypted config data within an application.

sn_cdm.cdm_secrets

[sn_devops_config.admin]

DevOps Config admin

Has editor role permissions plus ability to manage policies and exporters, and applications.

  • sn_devops.app_admin
  • sn_devops_config.editor
  • sn_cdm.cdm_admin
- **[Roles in CDM](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-service-management/devops-family/cdm-roles.md)** List of roles and permissions in CDM.

Parent Topic:DevOps Config reference

Search documentation
Search document titles and file paths on the australia branch