---
sourceDocument: Australia Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/australia/platform-security

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Secrets Management roles

# Secrets Management roles {#ariaid-title1}

Release version: Australia  
Updated March 12, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Secrets Management adds these roles.

## Secrets administrator \[sn_secrets.admin\] {#ariaid-title2}

Assign non-admin secrets roles to other users. Secrets administrators have the same privileges as secrets manager and viewer.

### Contains Roles {#sec-man-roles-1__section-feature-role-contains-roles}

List of roles contained within the role.

None.

### Groups {#sec-man-roles-1__section-feature-role-groups}

List of groups this role is assigned to by default.

None.

### Special considerations {#sec-man-roles-1__section-feature-role-considerations}

Important:  
Avoid granting an admin role when more specialized roles are available.

* A user must have both the admin and security_admin roles to be assigned the sn_secret.admin role.
* Avoid granting an admin role when more targeted roles are available.
{#sec-man-roles-1__ul_vp3_jyn_cyb}

## Secrets Management \[sn_secrets.secret_manager\] {#ariaid-title3}

Grant this role to users who must be able to perform any of the following functions.
* View secret and secret group records
* View access history, and other usage activity info
* Create secret groups and filters
* Create secret providers
* Move secrets across secret groups
* Change secret group and secret provider settings
{#sec-man-roles-2__ul_fkw_myn_cyb}

### Contains Roles {#sec-man-roles-2__section-feature-role-contains-roles}

List of roles contained within the role.

None.

### Groups {#sec-man-roles-2__section-feature-role-groups}

List of groups this role is assigned to by default.

None.

### Special considerations {#sec-man-roles-2__section-feature-role-considerations}

Important:  
Secrets managers can't see secrets in plain text.

## Secrets viewer \[sn_secrets.viewer\] {#ariaid-title4}

Grant this role to users who must be able to view secret and secret group records.

### Contains Roles {#sec-man-roles-3__section-feature-role-contains-roles}

List of roles contained within the role.

None.

### Groups {#sec-man-roles-3__section-feature-role-groups}

List of groups this role is assigned to by default.

None.

### Special considerations {#sec-man-roles-3__section-feature-role-considerations}

None.