Segregation of Roles for Developer and Admin

[sumitsingh]

Dear Experts,

Do we have a different roles in ServiceNow for distinction between Developer and Admin.

Currently the practice we are following is all developers are having Admin role with them.

We want to discontinue this and want to give developer specific roles to developer.

Please Suggest.

Thanks

Sumit

[harishdasari]

Hi Sumit,

Admin role is required to perform both the works like Admin activities and Developer Activities.

I don't think there is separate role for Admin's and Developers.

Thanks.

[Kalaiarasan Pus]

Something like this exists for team development and scoped app development. I guess the related role is delegated_developer for scoped app.

If the concern is doing unsupervised change on Prod, then I guess it makes sense to not give developers admins right on prod and admin takes over the responsibility of release management.

There are also reports such as My Changes( on customer Update [sys_update_xml] table) that you can customize and schedule it to monitor such unsupervised changes.

On a different note, if you can't trust your developer with admin role, why is he/she a developer in your instance?

[sumitsingh]

Hi! Kalaiarasan,

Thanks for sharing the knowledge.

This point came as Audit Point for us where Auditor has raised this point as Segregation of Duty.

Same Person can not do the development and deployment in PRD both.

Also, can you share the standard Release Management Process in ServiceNow which should followed?

Currently, we are manually exporting the XML and uploading the same in other instance.

THanks,

Sumit

[Kalaiarasan Pus]

There is no standard process as far as I know.

Few use exporting the XML as you do. Others use Update source for eliminating manual export-import.

Choose whichever suits your business.