Hi, just leaving this here for info rather than a question.
If you get the famous blacklisted error when trying to discover in Change Velocity:
Flow Designer: Failed to process event: sys_flow_context[d59833343b4dba900e300a4a85e45a66], targetContext: sys_flow_context[95983334634dba900dc3ce7693235865], exception: com.snc.process_flow.exception.ProcessAutomationException: Attempted to add black listed role: [9a133b58db0d2200b141d6fdbf9619e1]
The ServiceNow KA for it is here:
https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1587612
When I checked, each sn_devops role looked clean and contained no empties. What the KA doesn't state is that the stale sys ID/ empty role check also applies to EVERY nested role inside the various DevOps roles. In my case, the DevOps Admin role included ITIL, and within ITIL were a couple of empty roles. Clearing these out, deleting the stuck import requests and triggering another import worked after this.
Tldr; check within every role nested inside sn_devops.admin (most likely ITIL) for empty roles and clear them out, easiest way is to go to sys_user_role_contains.list and sort alphabetically, empty roles will show first in A-Z.
