Is there a role other than Admin that allows running of "System LDAP - Scheduled Loads"?

[Terry Wint]

Our User Admin team needs to be able to execute the LDAP sync when updating users and locations.

They had Admin assigned to their group but it would be better practice to remove Admin and configure their user group to perform this function without the admin role.

System LDAP > Scheduled Loads

Thank you!

[Jason Nichols · Accepted solution]

Hi Terry,

The import_scheduler role is sufficient. Although this role will not give you access to the System LDAP > Scheduled Loads module, it will grant access to System Import Sets > Scheduled Imports (which points to the same table). You could of course modify the Scheduled Loads module to grant access to this role (it is restricted to the admin role OOTB).

See also: Schedule a data import (ServiceNow Documentation)

Hope this helps.

[Terry Wint]

Thanks, Jason!

This appeared to have worked while I was impersonating one of the techs that now has the import_scheduler role. When I asked them to try, they received an error message stating: "Security constraints prevent access to requested page".

I did adjust the permissions for the Scheduled Loads module as you mentioned, and I checked the box to override menu permissions.

Any ideas on why they're getting the error? I must be missing something.

[Terry Wint]

Disregard this; I checked with the end user in person, and they can access it.

Thank you for the help!

[Jason Nichols]

Good to hear, Terry.

I should draw your attention to a note I found in the documentation today:

https://docs.servicenow.com/csh?topicname=r_BaseSystemRoles.html&version=latest 

Please read the warning in the description for the import_scheduler role.