Question about the Customer Table Role

[Young Lee]

Hi,

Does anyone can advise me if using snc_internal role for new custom tables would be good rather than having new roles for them in terms of role management? If I get new roles for every table creation, then it would be a burden to manage roles in the future. Is there any impact on using the OOB role for the custom tables?

[Sandeep Rajput · Accepted solution]

You can use the existing role snc_internal role if you do not wish to create a separate role along with the table creation. 

A separate role may be needed when you want to make that table accessible to a specific set of people having a table specific role. In other cases you may simply choose to reuse an existing role. Creating separate role along with the table creation may prove to be counter productive as one would have to manage these roles and would need to assign them to groups and individuals to allow them access to the custom table. All these efforts can be saved by using an existing role where specialised access is not needed.

[Young Lee]

Thank you for your answer. Is there an article regarding the role management best practice that I can refer to?

I couldn't find any yet.

[Sandeep Rajput]

@Young Lee I couldn't find the exact best practices around the role management in ServiceNow. However, here are few thumb-rules I follow while administering roles.

1. Never assign direct roles to users, always assign them via groups.
2. Do not create new roles unless you need to have specialised access to a table.
3. Roles and ACLs go hand in hand, create appropriate ACLs to limit users from accessing/manipulating information which is not meant for them

Following are some good reads about roles and groups.

https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB0965712

https://www.servicenow.com/community/developer-blog/6-tips-for-understanding-and-managing-servicenow...

Hope this helps.