Security Admin role not visible in ServiceNow

soonjohny
Kilo Explorer

I can't dole out yourself the security_admin part (or allot it to any other individual unless you as of now have the part). On the off chance that I take a gander at the sys_user_role table and look for security_admin without having the part, you'll get a security mistake.

Thank you @ Tekslate

3 REPLIES 3

sethivarun
Kilo Guru

Hi Johny,


In order to dole yourself the security_admin part do the following :


1) impersonate system administrator or the default admin account servicenow gives.


2) Elevate priviledges


3) go to your user, and assign security_admin role




Please mark as helpful or correct if it answers your question


Rajesh Mushke
Mega Sage
Mega Sage

Hello Johny,


Please follow below steps


Click on the user menu option and click on the elevate roles.



Capture.JPG



Check the security_admin and click on Ok.



Capture1.JPG



Security Administrator Role :


When the High Security plugin is activated, a new role called security_admin is created and added to the default System Administrator user. This role is a peerto the admin role and, therefore, is not inherited by users who are assigned the admin role by default (base system System Administrator, for example). This new role is marked as an elevated privilege, which means the user who is assigned the role will need to be manually elevated to the role during an interactive session. The security_admin role protects resources in the platform such as ACL, properties, and records, that require security to bar access by the normal admin user.




Thanks,
Rajashekhar Mushke
Rising star : 2022 - 2024
Community Leader -2018
Connect me on LinkedIn : Rajashekhar Mushke

Rajesh Mushke
Mega Sage
Mega Sage

Elevated privilege roles


Elevated privilege roles require a user to manually accept the responsibility of using the role before the user can access the features of the role.


By default, the system does not allow users to have elevated privilege roles upon login only. They must manually elevate to the privilege of the role. An elevated privilege role only lasts for the duration of the user session. Session timeout or log-out removes the role.


You can designate any role as an elevated privilege role, and then assign that role to one or more users. You should do this when you want to restrict users from having access to the rights that the role provides right away after login. You can designate the privilege role on the Role form. See Create a role for instructions.


To use an elevated role, all these conditions must be met:
  • The role must be assigned to the user.
  • The user must manually elevate roles.

The Security Administrator (security_admin) role

In the base system, the security_admin role is the only role that has elevated privileges. This role is automatically assigned to the user who is the default system administrator. It provides access to ACLs and High Security Settings.


Roles assigned to the System Administrator userThe list of roles assigned to the System Administrator user.



Note: To see this role, you must actually elevate to the security_admin role first. If you are logged in as the administrator only, you cannot see the security_admin record in the list of roles.



The security administrator role recordThe security_admin role




Thanks,
Rajashekhar Mushke
Rising star : 2022 - 2024
Community Leader -2018
Connect me on LinkedIn : Rajashekhar Mushke