List of roles for IRM lite and operator.

[Natraj S]

Hi All,

I am looking for the list of IRM lite operator and full operator, also it would be great if someone explains the difference between these two licenses.

Thanks in advance.

[HarshTimes]

Hi Natraj

Check below details.

Lite Operator 

• The product being sold is IRM Lite 
• License meter: Prerequisite: GRC: Business user - lite application is installed 
  
  • Any user satisfying any of these conditions is an lite operator  
    
    • Assigned any IRM application role with role type as lite operator. The full list of roles is queried from the sn_irm_shared_cmn_licensing_role_type table.

IRM Operator

• The product being sold is IRM standard/professional/enterprise.   
• License meter: any user satisfying any of these conditions is an IRM operator  
   
  
  • Assigned an IRM application role. For example, users with a  sn_compliance.*/sn_risk.*/sn_grc*/sn_audit*/sn_grc_reg_change role.  The applicable list of IRM roles can be queried from the sn_irm_shared_cmn_licensing_role_type table.  
  • Users accessing records from IRM application tables via actions like create, read, update, delete or accessing a record via url as recorded in ua_app_usage.list

Please check below knowledge article to understand about lite operator and full operator.

DEFN1001852 | IRM operator - Product Licensing and Compliance (servicenow.com)

DEFN1004375 | IRM Lite operator - Product Licensing and Compliance (servicenow.com)

Also, Check this community post. This may help you as well.

Solved: GRC IRM Lite Operator and Full Operator roles and ... - ServiceNow Community

[Amit Gujarathi]

HI @Natraj S ,
I trust you are doing great.
Here's a concise explanation of the differences between these two:

1. IRM Lite Operator:

   • Product: The license sold under this category is IRM Lite.
   • License Metering: This is predicated on having the GRC: Business user - lite application installed.
   • User Criteria: Users are considered Lite Operators if they are assigned any IRM application role classified as a lite operator. The roles applicable are listed in the sn_irm_shared_cmn_licensing_role_type table.

2. IRM Operator:

   • Product: This category covers standard, professional, or enterprise levels of IRM.
   • License Metering: Users fall under this category if they meet any of the following criteria:
     • Assigned an IRM application role (like sn_compliance.*, sn_risk.*, sn_grc*, sn_audit*, sn_grc_reg_change, etc.). These roles can be found in the sn_irm_shared_cmn_licensing_role_type table.
     • Users who interact with IRM application tables through actions like create, read, update, delete, or accessing records via URLs (tracked in ua_app_usage.list).

[Jan Spurlin]

@Natraj S - I agree with both of the previous posts, but I would add this.

There is a role called sn_grc.business_user_lite - but in order to see it you must make sure you have the GRC: Business User - Lite product installed from the store.  This product is part of the Integrated Risk Management product, but if you have something older installed, you may have to install it explicitly.

Secondly, this role DOES NOT contain all of the roles that are eligible for this lite license in the baseline.  Using the table referenced above (sn_irm_shared_cmn_licensing_role_type) you can see what roles are eligible for the lite license. Those can be added the sn_grc.business_user_lite role.  Of particular note is that some of the new risk roles that were added to this license are not part of the lite role in the baseline.