ServiceNow Development Instance Admin Account Has Become Read-Only

[Royyapalli]

Hi Community,

Our ServiceNow development instance admin account has unexpectedly become read-only. The admin user has the snc_read_only role inherited through other roles, and we are unable to make any record updates even after elevating to security_admin.

Could you please help us investigate the snc_read_only role assignment and role inheritance for the admin user and restore normal administrator write access?

We have not intentionally changed any ACLs or security settings.

Any guidance or assistance would be greatly appreciated.

Thanks.

[glideFather · Accepted solution]

ahoy @Royyapalli,

it must be reviewed and fixed by someone with the access to your instance. Nobody can do it from outside...

[Aditya_hublikar · Accepted solution]

Hello @Royyapalli ,

I as far i know snc_read_only does not inherit in admin role . May be it is added explicitly . I have created one user and assign admin role to that user , i dont see any snc_read_only inherited to that user .

If this helps you then mark it as helpful and accept as solution .

Regards,

aditya

[glideFather · Accepted solution]

ahoy @Royyapalli,

it must be reviewed and fixed by someone with the access to your instance. Nobody can do it from outside...

[Aditya_hublikar · Accepted solution]

Hello @Royyapalli ,

I as far i know snc_read_only does not inherit in admin role . May be it is added explicitly . I have created one user and assign admin role to that user , i dont see any snc_read_only inherited to that user .

If this helps you then mark it as helpful and accept as solution .

Regards,

aditya

[Tanushree Maiti]

Hi @Royyapalli 

Could you please check following troubleshooting steps:

1) Check Admin user connected to which groups and if that groups having snc_read_only role

• Navigate to sys_user_grmember.list.
• Filter by your admin user.
• Check recent record group which have been updated/created recently that carries the snc_read_only role

2) Check when the roles which admin having those contains snc_read_only or not

link : https://<your_instance_name>.service-now.com/now/nav/ui/classic/params/target/sys_user_role_contains_list.do%3Fsysparm_query%3Drole.nameSTARTSWITHsnc_read_only%26sysparm_first_row%3D1%26sysparm_view%3D%26sysparm_choice_query_raw%3D%26sysparm_list_header_search%3Dtrue

If any role is showing check whether your admin user is having that or not.

If post checking all possible options - if still you are unable to find the source of assignment of that specific role, Will suggest you to raise a case with your vendor and take their assistance .

[Royyapalli]

Hi @Tanushree Maiti 

Thank you for the response

We are unable to perform any of the suggested troubleshooting steps because we currently have only read access and cannot make any changes to the roles or ACLs. As far as we can see, only the System Administration has the snc_read_only.

Could you please suggest an alternative solution or help us identify how we can resolve this issue with our current access limitations?