“System Administrator” updating the Case assignment/Assign to user

[SSW]

In ServiceNow HRSD Case Management, “System Administrator” changes/Updates the assignments/Assigne to user to another. Why?

[Dr Atul G- LNG]

Please check whether, by default, the admin is receiving the HR Core Admin role (either directly or through inheritance). If that is the case, it may need to be removed manually.

[Tanushree Maiti]

Hi @SSW ,

In initial set up , To configure your system, you must log in as a System Administrator [admin]. The HR Administrator [sn_hr_core.admin] role is contained in the System Administrator [admin] role. 

It seems , Post completing set up , HR Admin  role is not separated from System Administrator.

Refer: HR Security setup: (HR) Admin

 Separate the HR Admin from the System Admin role

After system configuration, ensure that only the HR Administrator [sn_hr_core.admin] role has access to sensitive information. Remove the HR Administrator role from System Administrator [admin] role to prevent the System Administrator from viewing sensitive HR information.

Ensure that you have completed setup before removing the HR Administrator role. The base system requires a user with the System Administrator role to run scheduled jobs. For details on HR scheduled jobs, see Components installed with Case and Knowledge Management.

• To ensure the scheduled jobs run, change the user in the Run as field for each scheduled job to a user that has the HR admin role.

Note: Changing the user allows the scheduled jobs to run, but only a user with the System Admin role can view and run a scheduled job on demand.

• Change the scope of the application to Human Resources: Core application. For information on changing the scope, see Contextual development edit messages.
• Reveal the Run as field. For information on revealing hidden fields on a form, see Configuring the form layout.

Steps to remove the HR Admin role:

1. Log in as admin.
2. From User Administration, go to Roles (left navigation menu).
3. Click admin.
4. From the Contains Roles tab, click Edit.
5. From the Contains Roles List column, highlight and move sn_hr_core.admin to the Collection column.
6. Click Save.
7. Log out.