---
sourceDocument: Australia Workflow Data Fabric
sourceDocumentLink: https://www.servicenow.com/docs/r/australia/integrate-applications

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Workflow Data Fabric

ft:clusterId :

    - crint

bundleId :

    - crint

workflow :

    - Creator


---

# Operation-level security

# Operation-level security for models {#ariaid-title1}

Release version: Australia  
Updated October 26, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Control access to model operations with user roles and groups.

## Model operation security {#erp-canvas-set-operation-level-security-on-a-model__section_upf_kmj_njc}

You must have the sn_erp_integration.erp_admin role to create and edit models.

In Zero Copy Connector for ERP, new permission rules for model operations require you to have a specified role or be part of a specified user group to execute model operations. Each model operation must have at least one user role
or one user group specified. You can add multiple user roles and groups as needed.

On a single model, different operations can have different permissions. For example, a financial data model can have some users with only read access to review data, but they can't update or create a financial record. For that same
model, you can give other users or groups access to update and create financial records.

## Security of existing operations {#erp-canvas-set-operation-level-security-on-a-model__section_bgz_qmj_njc}

To help prevent disruptions, all existing model operations have been assigned the admin role and the erp_user role by default.

You can edit these permissions on the existing operations at any time to suit your needs. To change the permissions, select the edit (pencil) icon on the model operation card.

## Additional resources {#erp-canvas-set-operation-level-security-on-a-model__section_bf3_qmj_njc}

To learn more about adding an operation, see [Add an operation to a model in Zero Copy Connector for ERP](https://www.servicenow.com/docs/stjmTILz2ab~MX6lZ8AMIQ "Add an operation to an ERP model in Zero Copy Connector for ERP to define how the model retrieves data, writes data, or creates a new instance of the business object.").

To clone a model, you must have permissions to access the model operations. For more information, see [Clone an ERP model in Zero Copy Connector for ERP](https://www.servicenow.com/docs/0_IjkdESqiR1uYnr7jqrnA "Clone a standard ERP (Enterprise Resource Planning) model that ships with Zero Copy Connector for ERP. After you clone the model you can make modifications, such as adding new fields or tables.").