External roles in self-registration

concept brazil Updated Sep 10, 2026 1 min read external-roles-self-registration.md

To prevent inadvertently providing access to external users, you can assign the snc_external role to all external users.

External users that self-register must be assigned the snc_external role, which has the least privileges. The snc_external role indicates that the user is external to your organization and should not have any access to resources unless explicitly allowed through ACLs for the snc_external role or additional roles that inherit the snc_external role.

By default, users with the snc_external role cannot access:

Tables without the role that inherits the snc_external role or the public role.
Non-record type resources, such as processors and UI pages without the snc_external role or a role that inherits the snc_external role.
Platform Analytics dashboards.

Beginning with the Paris release, you must enable an exclude-list property to enforce the explicit assignment of snc_external roles. For information about enabling the property, see Prevent future internal role assignments for external users.

29 lines · 1.8 KB Wrap lines

---
title: External roles in self-registration
description: To prevent inadvertently providing access to external users, you can assign the snc\_external role to all external users.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/platform-security/authentication/external-roles-self-registration.html
release: brazil
product: Authentication
classification: authentication
topic_type: concept
last_updated: "2026-09-10"
reading_time_minutes: 1
breadcrumb: [Activate External User Self-Registration, Self-registration to ServiceNow instance, Authentication, Access Management]
---

# External roles in self-registration

To prevent inadvertently providing access to external users, you can assign the snc\_external role to all external users.

External users that self-register must be assigned the snc\_external role, which has the least privileges. The snc\_external role indicates that the user is external to your organization and should not have any access to resources unless explicitly allowed through ACLs for the snc\_external role or additional roles that inherit the snc\_external role.

By default, users with the snc\_external role cannot access:

-   Tables without the role that inherits the snc\_external role or the public role.
-   Non-record type resources, such as processors and UI pages without the snc\_external role or a role that inherits the snc\_external role.
-   Platform Analytics dashboards.

Beginning with the Paris release, you must enable an exclude-list property to enforce the explicit assignment of snc\_external roles. For information about enabling the property, see [Prevent future internal role assignments for external users](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/customer-service-management/fix-csm-external-user-roles-task4.md).