Join the #BuildWithBuildAgent Challenge! Get recognized, earn exclusive swag, and inspire the ServiceNow Community with what you can build using Build Agent.  Join the Challenge.

User lost role and need help finding out who did this

Community Alums
Not applicable

I am trying to figure out if there is a way to determine who removed a role from someone else. Does any one know a way to do this in Tokyo?

1 ACCEPTED SOLUTION

Gunjan Kiratkar
Kilo Patron
Kilo Patron

Hi @Community Alums 

Search in application navigator as deleted record and try to search if you get that record.

System Definition > Deleted Records

Table name = sys_user_has_role


Please Mark My Response as Correct/Helpful based on Impact
Regards,
Gunjan Kiratkar
2X ServiceNow MVP
Community Rising Star 2022
Youtube : ServiceNow Guy

View solution in original post

4 REPLIES 4

Gunjan Kiratkar
Kilo Patron
Kilo Patron

Hi @Community Alums 

Search in application navigator as deleted record and try to search if you get that record.

System Definition > Deleted Records

Table name = sys_user_has_role


Please Mark My Response as Correct/Helpful based on Impact
Regards,
Gunjan Kiratkar
2X ServiceNow MVP
Community Rising Star 2022
Youtube : ServiceNow Guy

Saurabh Gupta
Kilo Patron

Hi,
You can look in the users audit history as relationship lost if user table is being audited.

 

SaurabhGupta_0-1672341370126.png

 

 

 

 

 


Thanks and Regards,

Saurabh Gupta

Saurabh Gupta
Kilo Patron

Hi,

In Tokyo, there is a new feature of role auditing.

 

Enable role auditing with Contextual Security: Role Management V2 (servicenow.com)


Thanks and Regards,

Saurabh Gupta

Saurabh Gupta
Kilo Patron

PFA the result.

 

SaurabhGupta_0-1672341850617.png

 


Thanks and Regards,

Saurabh Gupta