Assign Operational Technology Manager roles

task australia Updated Sep 10, 2026 1 min read assign-operational-technology-manager-roles.md

Assign roles to your users so that you can control their access to the features, capabilities, and data in the Operational Technology Manager application.

Before you begin

Role required: admin

About this task

Users with the roles that are listed in the following table can use the Operational Technology Manager application.

If you want to configure site users, you can create and assign user criteria for equipment model entity site users. For more information, see Manage equipment model site access for non-administrators.

Role	Description
Operational Technology Discovery Administrator [ot_discovery_admin]	Can run the Discovery for Operational Technology process. Can't access the Configuration Management Database (CMDB) to view CIs and related Operational Technology (OT) entities created from discovered items. See Create and run the OT Discovery schedule and the Discovery process.
Operational Technology Manager Viewer [cmdb_ot_viewer]	Read-only access to Operational Technology (OT) device records.
Operational Technology Manager Editor [cmdb_ot_editor]	Create, read, update, and delete access for Operation Technology (OT) extension classes.Note: Users assigned the cmdb_ot_editor role can edit and delete only OT configuration items (CIs), but they aren’t permitted to edit IT CIs.
Operational Technology Manager Admin [cmdb_ot_admin]	Create, read, update, and delete access for Operational Technology (OT) device records. Can also edit and manage specific configurations in the OT entity type. To learn more, see Operation Technology (OT) extension classes.Note: Users assigned the cmdb_ot_admin role can edit and delete only OT configuration items (CIs), but they aren’t permitted to edit IT CIs.

## Procedure

Assign roles to users and groups by using the ServiceNow AI Platform user administration feature.

Task User administration feature

Assign a role to a user See Assign a role to a user.

Assign a role to a group See Assign a role to a group.

Task	User administration feature
Assign a role to a user	See Assign a role to a user.
Assign a role to a group	See Assign a role to a group.

Parent Topic:Configuring the Operational Technology Manager

82 lines · 4.1 KB Wrap lines

---
title: Assign Operational Technology Manager roles
description: Assign roles to your users so that you can control their access to the features, capabilities, and data in the Operational Technology Manager application.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/operational-technology/operational-technology-manager/assign-operational-technology-manager-roles.html
release: australia
product: Operational Technology Manager
classification: operational-technology-manager
topic_type: task
last_updated: "2026-09-10"
reading_time_minutes: 1
breadcrumb: [Configure, Operational Technology Manager, Operational Technology]
---

# Assign Operational Technology Manager roles

Assign roles to your users so that you can control their access to the features, capabilities, and data in the Operational Technology Manager application.

## Before you begin

Role required: admin

## About this task

Users with the roles that are listed in the following table can use the Operational Technology Manager application.

If you want to configure site users, you can create and assign user criteria for equipment model entity site users. For more information, see [Manage equipment model site access for non-administrators](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/operational-technology/industrial-process-manager/create-user-criteria-for-equipment-model-entity-site-users.md).

<table id="table_q55_vpq_4nb"><thead><tr><th>

Role

</th><th>

Description

</th></tr></thead><tbody><tr><td>

Operational Technology Discovery Administrator \[ot\_discovery\_admin\]

</td><td>

Can run the Discovery for Operational Technology process. Can't access the Configuration Management Database \(CMDB\) to view CIs and related Operational Technology \(OT\) entities created from discovered items. See [Create and run the OT Discovery schedule and the Discovery process](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/operational-technology/run-discovery-for-operational-technology.md).

</td></tr><tr><td>

Operational Technology Manager Viewer \[cmdb\_ot\_viewer\]

</td><td>

Read-only access to Operational Technology \(OT\) device records.

</td></tr><tr><td>

Operational Technology Manager Editor \[cmdb\_ot\_editor\]

</td><td>

Create, read, update, and delete access for [Operation Technology \(OT\) extension classes](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/servicenow-platform/cmdb-ci-class-models-operation-technology.md).**Note:** Users assigned the **cmdb\_ot\_editor** role can edit and delete only OT configuration items \(CIs\), but they aren’t permitted to edit IT CIs.

</td></tr><tr><td>

Operational Technology Manager Admin \[cmdb\_ot\_admin\]

</td><td>

Create, read, update, and delete access for Operational Technology \(OT\) device records. Can also edit and manage specific configurations in the OT entity type. To learn more, see [Operation Technology \(OT\) extension classes](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/servicenow-platform/cmdb-ci-class-models-operation-technology.md).**Note:** Users assigned the **cmdb\_ot\_admin** role can edit and delete only OT configuration items \(CIs\), but they aren’t permitted to edit IT CIs.

</td></tr></tbody>
</table>## Procedure

1.  Assign roles to users and groups by using the ServiceNow AI Platform user administration feature.

    |Task|User administration feature|
    |----|---------------------------|
    |**Assign a role to a user**|See [Assign a role to a user](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-administration/t_AssignARoleToAUser.md).|
    |**Assign a role to a group**|See [Assign a role to a group](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-administration/t_AssignRoleToGroup.md).|


**Parent Topic:**[Configuring the Operational Technology Manager](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/operational-technology/operational-technology-manager/configuring-operational-technology-manager.md)