snc_internal role is always auto generated by the system while creating any new service catalog item. What is the impact of this role?

[subhasmita]

Hello,

"snc_interna"l role is always auto generated by the system while creating any new service catalog item. What exactly this "snc_internal" role is? What is the impact of this role? Is it a normal behaviour whenever we create catalog item "snc_internal" should auto generate? Is there any background script for which this role is auto created? 

Regards,

Subhasmita 

[Vishal Khandve]

Hi,

snc_internal role is applied to every record that is created after SNC Access Control plugin is activate. (part of CSM)

Newly created users are automatically assigned the snc_internal role when they first attempt to log in to the instance, unless they have been explicitly assigned the snc_external role.
You can add the snc_external role to a new user before they first log in to the instance to provide external user rights.

more details: ServiceNow access control

thank you

[Daniele Songini · Accepted solution]

Hi,

The Explicit Roles (com.glide.explicit_roles) plugin provides the snc_external and snc_internal roles.

When this plugin is activated:

• All existing users are automatically assigned the snc_internal role. This role does not change existing access levels or system behavior. Rather, it provides a category to differentiate internal users from external users. All internal users maintain the same level of access as before the plugin was activated.
  
  
• Newly created users are automatically assigned the snc_internal role when they first attempt to log in to the instance, unless they have been explicitly assigned the snc_external role. You can add the snc_external role to a new user before they first log in to the instance to provide external user rights.

read this, it is very exhaustive about the behavior of the role.

Explicit roles

Please mark this as "Correct Answer" if I have given you a sufficient answer to your question.

Best Regards,
Daniele

[richelle_pivec]

Can you disable the plugin if it has been enabled? Somehow it got enabled in my Dev instance while I was working on Service Portal stuff. (Do you know what plugins add it in, so I can avoid them?)

Also, is it required in the New York version? We are on London now, but are about to upgrade to New York.

Thanks,

Richelle

[Daniele Songini]

Hi,

There are updates?

Please mark this as "Correct Answer" if I have given you a sufficient answer to your question.

Best Regards,
Daniele