What can the import_admin role do?

[nickt]

We have a user with the import_admin role. The description against the role says "Can manage all aspects of Import Sets and imports"

We need to ensure that this does not mean the user can make code, or configuration changes. Does this role gives the user that ability?

[jmiskey]

One easy way to check would be to impersonate that user, and see if you can make any of those changes.  As long as they don't have any other privileged roles (i.e. admin), it should be pretty easy to verify if they can or cannot do those things.

If they can, try removing that role, and doing the same again.  That would confirm where those rights and privileges are coming from.

[nickt]

I know I can impersonate and test what the user can do, but I was wondering if there was any documented clarification on the aspects the role has, so that I can share it with our Security Team.

I've checked ServiceNow Documents, and can only find the same detail as mentioned in my original question.

Any one able to help?

[Ankur Bawiskar]

Hi Nick,

I think the only thing which this user can do is attach file to data source, execute the transform map etc

to verify more impersonate with this user and visit business rule table using sys_script.LIST

check whether that user can edit any script or any field on business rule form

also visit sys_script_include.LIST table which is for script include and try same

Mark Correct if this solves your issue and also mark Helpful if you find my response worthy based on the impact.
Thanks
Ankur

[tgimenez]

https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB0724462