Temporary fulfiller access request

[Divya13]

Hi All,

I have a requirement to provide a fulfiller role on a request for a temporary period and then automatically remove the role from users. I was trying to understand if this will cause an compliance issue as these users will have to be assigned temporarily only.  In short this is a delegate functionality but the delegate users for whom access has to be given are not having that role.

Any suggestions or thoughts are appreciated.

[Satishkumar B · Accepted solution]

@Divya13 Granting a fulfiller role temporarily and then automatically removing it can raise compliance concerns, especially if the role grants elevated permissions. To mitigate this, ensure that the temporary assignment is closely monitored, and access is removed as scheduled. Consider using ServiceNow's Delegated Development or Access Control mechanisms to limit exposure and maintain audit trails.

https://docs.servicenow.com/bundle/xanadu-platform-administration/page/administer/roles/concept/time...

…………………………………………........................................................................................
Please Mark it helpful 👍and Accept Solution ✅!! If this helps you to understand.

…………………………………………........................................................................................

[Divya13]

Thank you @Satishkumar B  for your response. We are still in Vancouver so currently we don't have that privilege.  This is not an ITSM fulfiller. It is a role fulfiller role in custom app. 

Ask is to onboard a person shortly for any absence of person during vacation. So the person to whom it is delegated will not ideally have an role as this is from business. 

That is where I was trying to identify that if approach mentioned above will cause compliance issues. 

Looks like it will and might have to check with the ServiceNow Directly on this.