How to Set up Groups & Roles in Service (Looking for Best Practice)

[Bhushan216]

We have a requirement to set up roles & groups in ServiceNow & rework for the entire access as according to the current Implementation below are some issues:

1. No best practices are followed as some roles are directly assigned to User which hamper's the maintainability.

2. Some users have excess permissions to the Modules / Custom tables which they have not supposed to.

We are looking for re-work on entire access in ServiceNow to get some of the above issues rectified.

Sharing of Standard Practices & Earlier Experience are highly Appreciated

Thanks,

Bhushan

[Sandeep Rajput]

@Bhushan216 The simple best practice here is to always grant the roles via groups. You can also add a business rule on sys_user_has_role table to abort insert if the role is not granted by a group, this way you would be able to prevent direct role assignment in future.

[Sandeep Rajput]

@Bhushan216 Do you have any further question on this topic, if not then please mark the response as accepted solution. 

[Dr Atul G- LNG]

Hi @Bhushan216 

Might be helpful

https://youtu.be/CdPvkWkEebQ