The ITIL role is a powerful role. Out-of-the-box it actually contains MANY other roles as documented here:
https://www.servicenow.com/docs/r/platform-administration/user-administration/r_BaseSystemRoles.html
Has anyone chosen to remove some of those underlying roles from the ITIL role?
In particular, the one that concerns us is the snc_platform_rest_api_access role. Does an ITIL user who is only ever in the UI really need this role?
My concern is that this role allows for any ITIL user to be able to interact with the platform external to the UI via APIs. The description on the snc_platform_rest_api_access role states:
Allows access to Platform Rest APIs
- Table API
- Import Set API
- Aggregate API
- Attachment API
Is it safe to remove this role from the ITIL role? I just don't know if this is inherent to underlying functionality the user needs within the UI, OR, is this for hitting API endpoints external to the UI? (the latter is what we don't want to grant to all our ITIL users.)
