Security Admin role not visible in ServiceNow
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎09-21-2017 11:57 PM
I can't dole out yourself the security_admin part (or allot it to any other individual unless you as of now have the part). On the off chance that I take a gander at the sys_user_role table and look for security_admin without having the part, you'll get a security mistake.
Thank you @ Tekslate
- Labels:
-
Team Development
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎09-22-2017 01:54 PM
Hi Johny,
In order to dole yourself the security_admin part do the following :
1) impersonate system administrator or the default admin account servicenow gives.
2) Elevate priviledges
3) go to your user, and assign security_admin role
Please mark as helpful or correct if it answers your question
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎09-23-2017 05:27 AM
Hello Johny,
Please follow below steps
Click on the user menu option and click on the elevate roles.
Check the security_admin and click on Ok.
Security Administrator Role :
When the High Security plugin is activated, a new role called security_admin is created and added to the default System Administrator user. This role is a peerto the admin role and, therefore, is not inherited by users who are assigned the admin role by default (base system System Administrator, for example). This new role is marked as an elevated privilege, which means the user who is assigned the role will need to be manually elevated to the role during an interactive session. The security_admin role protects resources in the platform such as ACL, properties, and records, that require security to bar access by the normal admin user.
Thanks,
Rajashekhar Mushke
Rising star : 2022 - 2024
Community Leader -2018
Connect me on LinkedIn : Rajashekhar Mushke
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎09-23-2017 05:27 AM
Elevated privilege roles
Elevated privilege roles require a user to manually accept the responsibility of using the role before the user can access the features of the role.
By default, the system does not allow users to have elevated privilege roles upon login only. They must manually elevate to the privilege of the role. An elevated privilege role only lasts for the duration of the user session. Session timeout or log-out removes the role.
You can designate any role as an elevated privilege role, and then assign that role to one or more users. You should do this when you want to restrict users from having access to the rights that the role provides right away after login. You can designate the privilege role on the Role form. See Create a role for instructions.
To use an elevated role, all these conditions must be met:
- The role must be assigned to the user.
- The user must manually elevate roles.
The Security Administrator (security_admin) role
In the base system, the security_admin role is the only role that has elevated privileges. This role is automatically assigned to the user who is the default system administrator. It provides access to ACLs and High Security Settings.

The security administrator role record

Thanks,
Rajashekhar Mushke
Rising star : 2022 - 2024
Community Leader -2018
Connect me on LinkedIn : Rajashekhar Mushke