When managing user roles in ServiceNow, it's essential to distinguish between active users and those who have not accessed the system in a long time. The following steps will help you generate a report listing active users assigned to specific roles.
Steps to Generate the Report
-
Access the User Roles Module
- Navigate to the "User Roles" module.
- Alternatively, type sys_user_has_role.list in the application navigator and press Enter.
-
Apply Filters to Identify Active Users
Click the funnel icon to open the filter options and build the following query:- User > Active → is true
- User > Last login time → RELATIVE after 365 days ago
- User > Web service access only → is false (excludes API users)
- Role > Name → is [role name #1]
- OR Role > Name → is [role name #2]
- (Add additional roles as needed)
-
Run the Query
- Depending on the number of users in your system, the query may take some time to process.
-
Review the Results
- The list will display active users with the selected roles, allowing you to verify proper role allocation.
Enhancing Role Audits with Custom Reports
This method is especially useful when combined with the custom scan Excel report available from your ServiceNow account team. These reports highlight all roles flagged as Fulfiller, helping you streamline role audits and ensure correct access permissions.
Published by Sylvain Hauser.
From his internship at ServiceNow in 2007 to his certification as a Technical Architect (CTA), Sylvain has spent most of his professional life leading innovation with ServiceNow.
