Security Exposure Management Workspace Roles

reference brazil Updated Sep 10, 2026 1 min read sem-new-roles-installed.md

List of roles installed with Security Exposure Management, defining user permissions and access for Security Exposure Management-related tasks.

Application	Role title	Description	Contains roles
Vulnerability Response Common	sn_vul_cmn.usem_admin	Configures rules, integrations, and related settings for Vulnerability Response, Application Vulnerability Response, Container Vulnerability Response, and Configuration Compliance.	sn_vul.vulnerability_admin sn_vul.app_sec_manager sn_vul_container.vulnerability_admin sn_vulc.admin
Administration for Security Exposure Management	sn_sec_wf.read_admin_rules	Read access to administration rules.	sn_sec_calculator.read sn_vul_cmn_ws.read_admin_rules sn_vul_cmn.read_auto_close_rules
Administration for Security Exposure Management	sn_sec_wf.manage_admin_rules	Create, read, update, and delete administration rules.	sn_vul_cmn.manage_auto_close_rules sn_sec_wf.read_admin_rules sn_vul_cmn_ws.write_admin_rules sn_sec_calculator.admin
Exception Management for Unified Security Exposure Management	sn_sec_exception.approver	Approve or reject exception requests, false positive requests, and exception rules.	sn_sec_exception.read
Exception Management for Unified Security Exposure Management	sn_sec_exception.read	Read access to exception management configuration and exception rules.	None.
Exception Management for Unified Security Exposure Management	sn_sec_exception.admin	Create, read, update, and delete exception management configuration and exception rules.	sn_sec_exception.read
Risk Scoring for Security Exposure Management	sn_sec_calculator.read	Read access to records in the `sn_sec_calculator` scope.	None.
Risk Scoring for Security Exposure Management	sn_sec_calculator.admin	Create, read, update, and delete records in the `sn_sec_calculator` scope.	sn_sec_calculator.read

**Parent Topic:**[Security Exposure Management Workspace Components](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/sem-components-installed.md)

Parent Topic:Unified Security Exposure Management reference

174 lines · 3.4 KB Wrap lines

---
title: Security Exposure Management Workspace Roles
description: List of roles installed with Security Exposure Management, defining user permissions and access for Security Exposure Management-related tasks.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/security-management/sem-new-roles-installed.html
release: brazil
topic_type: reference
last_updated: "2026-09-10"
reading_time_minutes: 1
breadcrumb: [Implement, Unified Security Exposure Management, Security Operations]
---

# Security Exposure Management Workspace Roles

List of roles installed with Security Exposure Management, defining user permissions and access for Security Exposure Management-related tasks.

<table id="table_tvj_fyc_hgc"><thead><tr><th>

Application

</th><th>

Role title

</th><th>

Description

</th><th>

Contains roles

</th></tr></thead><tbody><tr><td>

Vulnerability Response Common

</td><td>

sn\_vul\_cmn.usem\_admin

</td><td>

Configures rules, integrations, and related settings for Vulnerability Response, Application Vulnerability Response, Container Vulnerability Response, and Configuration Compliance.

</td><td>

-   sn\_vul.vulnerability\_admin
-   sn\_vul.app\_sec\_manager
-   sn\_vul\_container.vulnerability\_admin
-   sn\_vulc.admin

</td></tr><tr><td>

Administration for Security Exposure Management

</td><td>

sn\_sec\_wf.read\_admin\_rules

</td><td>

Read access to administration rules.

</td><td>

-   sn\_sec\_calculator.read
-   sn\_vul\_cmn\_ws.read\_admin\_rules
-   sn\_vul\_cmn.read\_auto\_close\_rules

</td></tr><tr><td>

Administration for Security Exposure Management

</td><td>

sn\_sec\_wf.manage\_admin\_rules

</td><td>

Create, read, update, and delete administration rules.

</td><td>

-   sn\_vul\_cmn.manage\_auto\_close\_rules
-   sn\_sec\_wf.read\_admin\_rules
-   sn\_vul\_cmn\_ws.write\_admin\_rules
-   sn\_sec\_calculator.admin

</td></tr><tr><td>

Exception Management for Unified Security Exposure Management

</td><td>

sn\_sec\_exception.approver

</td><td>

Approve or reject exception requests, false positive requests, and exception rules.

</td><td>

sn\_sec\_exception.read

</td></tr><tr><td>

Exception Management for Unified Security Exposure Management

</td><td>

sn\_sec\_exception.read

</td><td>

Read access to exception management configuration and exception rules.

</td><td>

None.

</td></tr><tr><td>

Exception Management for Unified Security Exposure Management

</td><td>

sn\_sec\_exception.admin

</td><td>

Create, read, update, and delete exception management configuration and exception rules.

</td><td>

sn\_sec\_exception.read

</td></tr><tr><td>

Risk Scoring for Security Exposure Management

</td><td>

sn\_sec\_calculator.read

</td><td>

Read access to records in the `sn_sec_calculator` scope.

</td><td>

None.

</td></tr><tr><td>

Risk Scoring for Security Exposure Management

</td><td>

sn\_sec\_calculator.admin

</td><td>

Create, read, update, and delete records in the `sn_sec_calculator` scope.

</td><td>

sn\_sec\_calculator.read

</td></tr></tbody>
</table>**Parent Topic:**[Security Exposure Management Workspace Components](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/sem-components-installed.md)

**Parent Topic:**[Unified Security Exposure Management reference](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/unified-security-exposure-management-reference.md)