---
sourceDocument: Australia Workflow Data Fabric
sourceDocumentLink: https://www.servicenow.com/docs/r/australia/integrate-applications

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Workflow Data Fabric

ft:clusterId :

    - crint

bundleId :

    - crint

workflow :

    - Creator


---

# Stream Connect roles

# Stream Connect roles {#ariaid-title1}

Release version: Australia  
Updated March 12, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Assign roles to specify what different users can see and do.

## Roles {#stream-connect-apache-kafka-roles__section_ffp_b2l_qhc}

For more information about managing and assigning roles, see [Managing roles](https://www.servicenow.com/docs/access?context=ua-creating-roles&version=australia&pubname=australia-platform-administration&ft:locale=en-US).
{#stream-connect-apache-kafka-roles__table_u4x_zmk_qhc__entry__3}

| Role | Description | Roles inherited |
|-|-|-|
| Kafka_admin | Manage integration with Kafka, including topics and settings related to kafka subscriptions. | * sn_help_setup_player * pd_author * hermes_viewer * pd_operator * stream_connect_alert_viewer * canvas_user * view_changer * fd_read_flows {#stream-connect-apache-kafka-roles__ul_qg1_mrk_qhc} |
| kafka_namespace_admin | Manage Kafka namespace definitions. In an MSP instance with Kafka integrations in multiple domains, managing namespace definitions properly is important to maintain separation between domains, so it is recommended that this role not be granted to administrators within a single domain. | kafka_admin |
| stream_connect_admin | Management role for setting related to subscriptions, topics etc. | * message_replication_admin * stream_connect_api * kafka_admin * stream_connect_viewer * kafka_namespace_admin * connection_admin {#stream-connect-apache-kafka-roles__ul_rgw_qqk_qhc} |
| stream_connect_alert_viewer | Read-only access to all stream connect alert records and logs. | None |
| stream_connect_api | Role with full access to invoke Stream Connect scriptable APIs | None |
| stream_connect_readonly_api | Role required to invoke read-only scriptable API calls related to Stream Connect | None |
| stream_connect_viewer | Role with read-only access to Stream Connect configuration and runtime statistics. | * message_replication_user * hermes_viewer * stream_connect_readonly_api * stream_connect_alert_viewer {#stream-connect-apache-kafka-roles__ul_xst_grk_qhc} |
[Table 1. Stream Connect roles]

{#stream-connect-apache-kafka-roles__table_u4x_zmk_qhc}