Working/ Testing without Admin role on QA/PROD

[Nikhil Bajaj9]

Hi All,

I want my testers to Test in QA environment and cross verify the things in PROD after code movement but i don't want to give them Admin Role on PROD and QA as well. Can you please suggest the best strategy or what role apart from sn_read_only, ITIL and impersonator i should provide my Dev and Testers on QA/PROD environment. 

@Ankur Bawiskar , @Dr Atul G- LNG , @Allen Andreas , @Mark Roethof , @Maik Skoddow , @Ashutosh Munot1 , @Sandeep Rajput , @Anurag Tripathi , @Prasad Pagar , @Ravi Gaurav , 

[Deepak Shaerma]

Hi @Nikhil Bajaj9 

If testing ITSM: itil, approver_user, incident_read, change_read, problem_read .
reports_admin (or report_publisher): Often testers need to verify that reports/dashboards are functioning after a deployment. This allows them to view report configurations without modifying system data.
configuring ATF also helps the testers.
Happy to help! ‌‌
To help others in the community find this solution, kindly mark this response as the Correct Answer ‌‌ and Helpful‌‌.
Warm Regards,
Deepak Sharma
Community Rising Star 2025

[Ankur Bawiskar]

@Nikhil Bajaj9 

my thoughts

-> in PROD admin can verify if everything came fine, you can try to give Read-only admins to some users to verify

-> in QA try giving minimum these roles

itil, snc_read_only, impersonator + these additional roles:
- asset
- inventory_user
- knowledge
- report_user
- report_admin
- pa_user (Platform Analytics)

💡 If my response helped, please mark it as correct ✅ and close the thread 🔒— this helps future readers find the solution faster! 🙏

[Dr Atul G- LNG]

Hi @Nikhil Bajaj9 

The testing is crucial part of any go live.

For QA I will say try to get admin rights the reason is bcz if client raised any defect , Dev can easily check n reproduce there only.

For testing purpose if admin role not available 

Then

1st ,use ATFvas maximum testing

And test case which are left give the minimum role to complete that part, like ITIL, module specific.

For prod , yes we never do actual testing, it done by business only.

You can request for read only admin that is best way only to see all configuration and also take client help if need to deep dive for testing as I assume they have admin rights.

These are kind of best practice you can follow mate.

[AndersBGS]

Hi @Nikhil Bajaj9 ,

You shouldn't provide any additional role besides what they normally have on PROD, as UAT = User acceptance test. So basically, they need to verify the solution from a user/fulfiller perspective - not from a developer perspective.