It would be helpful to know which ServiceNow roles are permitted access to the new capability.   In previous documentation, the required roles were explicitly specified.   Additionally, how do the roles currently assigned that permit access to Instance Security Center migrate to this new capability.