The Zurich release has arrived! Interested in new features and functionalities? Click here for more

ECMDB_ADMIN Role has no access to use the CI Class Manager by default

MFO1911
Tera Contributor

‎01-24-2022 05:30 AM

Hello.

I am a bit confused about the fact that a User with the Role ecmdb_admin has no access to the CI Class Manager module by default. I thought a user with this role can manage all about CMDB topics like checking attributes or setting up identification rules. Can someone explain why ServiceNow choose this as a default role, when it is not have the possibility to manage CMDB tasks? Maybe an other role would be better? A CMDB_Admin role is not available in the list of the base system roles (only cmdb_read).

Many Thanks

MFO

  • 1,136 Views
2 REPLIES 2

MFO1911
Tera Contributor

‎01-24-2022 08:04 AM

Hi,

Thanks for the answers. Of course I can give the user the itil role then they have read access to the ci class manager. The question is more about for what reasons ServiceNow decides to restrict the permissions of  the ecmdb_admin role by default?

Cause for my understanding the tasks of a ecmdb admin is per itil definition to creating new cis, setting up identification and reconciliation rules, look for the attributes and so on...Maybe i think wrong and this should be done by an other persona. If this is the case which system roles are really needed and to fully manage the cmdb and why these are the correct ones?

We only want to use the basic system roles to avoid so much customizing.


Many thanks

MFO

0 Helpfuls