Why does the itil role have read access to the table sys_encryption_context?

[Daniel Oderbolz]

When reviewing the ACLs of an instance, we noticed that the role "itil" has full read access to the table "sys_encryption_context".

We do not fully understand the reasoning behind this.

Can anybody elaborate?

Thanks a lot & Best

Daniel

[Mike_R]

I would imagine it's so ITIL users can properly see/read encrypted data but I don't see any documentation on SN website. I would suggest opening a case with support for an explanation. 

[Daniel Oderbolz]

Thanks @Mike_R 
I see where you are coming from, but then why would it be restricted to the itil role?

I will open a case in January.

Best
Daniel