Configure role-based multi-factor criteria

---
title: Configure role-based multi-factor criteria
description: Use role-based multi-factor criteria to enforce multi-factor authentication for all users assigned to specific roles.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/platform-security/authentication/mfa-role-criteria.html
release: australia
product: Authentication
classification: authentication
topic_type: task
last_updated: "2026-09-10"
reading_time_minutes: 1
breadcrumb: [MFA criteria, Configuring MFA, Multi-factor authentication, Authentication, Access Management]
---

# Configure role-based multi-factor criteria

Use role-based multi-factor criteria to enforce multi-factor authentication for all users assigned to specific roles.

## Before you begin

Role required: adaptive\_auth\_admin

## Procedure

1.  Navigate to **All** > **Multi-factor Authentication** > **Multi-factor Criteria**.

2.  In the **Multi-factor Criteria** list, open the **Role-based multi-factor authentication** record.

3.  Use the **Multi-factor Roles** list to add or remove roles.

<table id="choicetable_w45_gnx_bpb"><tbody><tr><td id="d34697e87">

**Add a role**

</td><td>

Double-click **Insert a new row...** and enter or select a role name. Select the **Save Icon** \(\[Omitted image "save-icon.png"\] Alt text: Save icon\) to save the entry.

</td></tr><tr><td id="d34697e108">

**Remove a role**

</td><td>

Select the delete icon \(\[Omitted image "delete-icon.png"\] Alt text: delete icon\) to remove a role from the list.

</td></tr></tbody>
</table>4.  Select **Update**.


## Result

Your instance enforces multi-factor authentication for all users who are members of the roles listed in the **Multi-factor Roles** list.

**Important:** The record must be active to enforce role-based multi-factor authentication.