Is it possible to edit the options for available roles under "Elevate Role"?

Anushree Sarkar
Tera Contributor

Hi Members,

 

I have a requirement of providing limited "admin" role to specific users in production environment, similar to what we have for security_admin role, i.e. when a user clicks on "Elevate Role" from the profile dropdown options, a pop-up window appears which provides an option to update the checkbox to "security_admin" role. Can more roles be added to that list? For example, if a user wants to utilize the "admin" role for specific tasks, and after logging out from the session, it is removed automatically. Is it feasible to do so? Any alternate suggestions are welcome.

 

Thanks,

Anushree

1 ACCEPTED SOLUTION

Mark Manders
Mega Patron

To your question: yes, you can add more options there. You can make a certain role 'elevated' and the role will show up there.

To your use case: no. You need to have the role to be able to elevate to it. Making the admin role an elevated role would be creating huge issues for normal admins. 

If someone, for some reason needs to perform certain tasks with the admin role, you should grant them the admin role or add other roles to the functionality you want to be available. If you create a custom, elevated role for that, you could achieve your requirement, but you should really ask yourself why the hassle. If it's admin related, you only should have admins do this. And if they shouldn't always be working as admin, you should give them a second user the can log in with, that does have the admin role. 
OOB Security reports can tell you which admin logged in when.


Please mark any helpful or correct solutions as such. That helps others find their solutions.
Mark

View solution in original post

8 REPLIES 8

Syed zabiullah
Tera Expert

Hi @Anushree Sarkar ,

 

No, it is not possible to directly edit the available roles under the Elevate Role.


If my response helped, please mark it correct.

Regards
Syed K

Thanks Syed for your prompt response. I was expecting the same, since it's an OOB configuration. Is there any alternate solution to provide admin role only on demand i.e. the user can use the admin role for performing some activities and later on it is removed after logout, if you could help on this please.

Ankur Bawiskar
Tera Patron
Tera Patron

@Anushree Sarkar 

it's an out of the box page, even if you are able to add some choices I won't recommend that.

If my response helped please mark it correct and close the thread so that it benefits future readers.

Regards,
Ankur
Certified Technical Architect  ||  9x ServiceNow MVP  ||  ServiceNow Community Leader

Hi Ankur,

Thanks much for your prompt response. I was expecting the same, since it's an OOB configuration. Is there any alternate solution to provide admin role only on demand i.e. the user can use the admin role for performing some activities and later on it is removed after logout, if you could help on this please.