OOB Read-Only Role for SAM Tables (Software Models & Entitlements)?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
yesterday
Hi everyone,
I’m looking to confirm whether there is an out-of-the-box role in ServiceNow SAM Pro that can be assigned to users to provide view-only access to SAM data — specifically:
- Software Models (cmdb_software_product_model)
- Software Entitlements (alm_license and related tables)
The goal is to allow users to review and report on SAM data without having any ability to modify records.
Has anyone used a standard OOB role (or combination of roles) that achieves this? Or is the recommended approach to create a custom read-only role with ACL restrictions?
Appreciate any guidance or best practices!
Thanks in advance.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
yesterday - last edited yesterday
OOTB Roles:
- SAM User: This role grants a user access to the Software Asset Management application. This user would not be able to perform sam_admin functions. The same role is used for both SAM foundation and SAM professional so the features available for the sam_user may be limited based on the application in use.
- SAM Admin: This role grants a user full access to the respective features of the Software Asset Management application including the ability to create Custom Products and Pattern Normalization Rules. The same role is used for both SAM foundation and SAM professional so the features available for the sam_admin may be limited based on the application in use.
---------------------------------------------------------------------------------
So, if you don't want the people to see the rest of the tables then you will need a custom role with ACL.
ServiceNow SAM readiness checklist: https://www.servicenow.com/community/sam-articles/implementation-leading-practices-for-sam/ta-p/2318...
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
yesterday
The answer is "no". We had this ask from a customer and there is no OOTB role that provides viewing access only. Sorely needed, in my opinion.