Impact of removing sn_hr_core.admin role from admin

[21p31a1220]

Hello,

Is there any known issue or platform impact if we try to remove or restrict sn_hr_core.admin from users having the admin role?

[Huynh Loc]

Hello @21p31a1220 ,

sn_hr_core.admin is the HR Service Delivery application administrator role, and many HRSD components explicitly check for this role, not admin.

As a result, if this role is removed from a user, they will be unable to access or work with HRSD components, even if they still hold the admin role.

If this response was helpful, please consider marking it as Correct and Helpful. You may mark more than one reply as an accepted solution.

[Ankur Bawiskar]

@21p31a1220 

usually HR Admin role is removed from admin before go-live as it will give access to entire HR data which contains sensitive information

Impact

-> admins without HR Admin role can't see left nav modules, HR table data etc

💡 If my response helped, please mark it as correct ✅ and close the thread 🔒— this helps future readers find the solution faster! 🙏

[21p31a1220]

When we removed sn_hr_core.admin role  from an admin role, multiple associated roles (HR, analytics, content, governance, etc.) were also removed automatically. After this, the “New” button disappeared from the  Contains Roles related list.
before and after remove the role the image llooks like this way 

Also, does removing these HR admin roles have any impact on ITSM modules?

Thanks for your help.

[Dr Atul G- LNG]

Hi @21p31a1220 

No, since it is scoped to a specific role, there is no impact on the ITSM side. However, you need to test it very carefully to ensure everything works as expected.