ServiceNow Administration
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎06-19-2025 03:59 AM
How to fetch the report for Unused roles and groups using filter option for clean up activity
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎06-19-2025 04:15 AM
What is your business requirement? Groups I understand, roles I don't, unless it is for custom roles. The fact that you don't use (some) OOB roles, does not mean that you can delete them. You will break the platform and create (huge) technical debt which you will regret with every upgrade.
Also: define 'unused groups'. Of course, a group without users has no use, but it could be that the group itself is still used in a flow/rule/acl/etc. Next to that: if you have an 'ITIL' group to grant the ITIL role to all the child groups you created under it, the group itself wouldn't have any members, but is still needed. Removing it, would remove the ITIL role from all of those users.
Please explain what it is you exactly want to do, and most importantly: WHY?
Reporting itself can be done using related list conditions, but without a clear business case to do this (more than your question), I wouldn't go there yet.
Please mark any helpful or correct solutions as such. That helps others find their solutions.
Mark
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎06-19-2025 04:42 AM
Hi Mark,
Thank you for your response. My business requirement is As an admin, I want to regularly review and clean up groups, roles, and inactive users to maintain security and compliance.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎06-19-2025 04:56 AM
Never 'clean up' OOB roles. Deleting groups/users will break the references to the records they were used on. Unclear what security has to do with inactive users/unused groups, because they simply don't do anything, nor can they login.
Please mark any helpful or correct solutions as such. That helps others find their solutions.
Mark
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎06-19-2025 05:19 AM
Hi Mark,
sure we will not delete the roles or groups just want fetch the report and we want to archive unused groups or roles