Knowledge Management Governance, Roles, Ownership Groups and Access Model - HRSD

[bhaavani]

Hi Experts,

We recently conducted a workshop on ServiceNow Knowledge Management in HRSD and are looking for guidance on a few topics related to governance, access management, roles, ownership, and Knowledge Blocks. We would appreciate any best practices, recommendations, or real-world implementation experiences. 

1. Ownership Groups vs. "Can Contribute" User Criteria

We are trying to understand the purpose and behavior of Ownership Groups when Can Contribute User Criteria are already configured at the Knowledge Base level.

Specifically:

• If a user matches the Knowledge Base Can Contribute User Criteria but is not a member of the article's Ownership Group, can they still edit or contribute to that article?
• If a user is not included in the Knowledge Base Can Contribute User Criteria, but is a member of the article's Ownership Group, can they edit, approve, publish, or retire that article?
• If a user is neither part of the Knowledge Base Can Contribute User Criteria nor a member of the Ownership Group, I assume they cannot contribute to the article. Is this correct?
• What is the practical use case for Ownership Groups when contribution access is already controlled through Knowledge Base User Criteria?
• Are Ownership Groups primarily intended for article ownership and governance, or do they override Knowledge Base contribution permissions?
• Is there a defined precedence between Knowledge Base User Criteria and Ownership Group membership?

2. IAM Integration and Role Management

Our organization uses a centralized IAM solution to manage access.

We observed that when a user is assigned as a Knowledge Manager on a Knowledge Base, the required ServiceNow role is automatically granted.

This raises a few governance questions:

• Is it considered best practice to manage Knowledge Management roles through IAM-managed groups?
• Should roles such as knowledge, knowledge_manager, and knowledge_admin be requested and provisioned through IAM?
• Or is it common practice to rely on the out-of-the-box automatic role assignment performed by ServiceNow?
• How do other organizations align Knowledge Management access with centralized IAM governance?

3. Knowledge Management Roles and Responsibilities

We would like clarification on the standard ServiceNow Knowledge Management roles and how they should be mapped to a business operating model.

Specifically:

• What are the standard ServiceNow Knowledge Management roles and their intended purpose?
• Which roles are typically assigned to:
  • Knowledge Base Owner
  • Knowledge Manager
  • Knowledge Contributor / Author
• What are the recommended responsibilities and permissions for each role?
• Are there any best practices for role assignment and segregation of duties?

4. Knowledge Blocks and Governance

We are also looking for clarification on the governance and access model for Knowledge Blocks.

Specifically:

• Are there any dedicated ServiceNow roles for creating, maintaining, and managing Knowledge Blocks?
• Do Knowledge Blocks use the same roles as Knowledge Articles?
• Who is typically responsible for maintaining reusable Knowledge Blocks in an enterprise setup?
• How are permissions inherited between Knowledge Bases, Knowledge Articles, and Knowledge Blocks?
• Are there any recommended best practices for ownership and governance of Knowledge Blocks?

Any best practices, lessons learned, or examples from real-world implementations would be greatly appreciated.

Thank you in advance for your support and insights.