Managing roles

Administrators can create and configure roles that grant specific permissions, which govern what users and groups with that role can do.

• Base system roles
  Administrators can assign one or more base system user roles to grant access to base system platform features and applications.
• System roles
  Administrators can control access to features and capabilities on a ServiceNow instance by assigning roles to users.
• Create a role
  Create a role to control access to features and capabilities in applications and modules. The new role doesn’t have access to any application or module until you add other roles to it, or add it to the appropriate applications and modules.
• Audit user roles
  Changes to user roles are tracked in the Audit Roles [sys_audit_role] table.
• Delegating roles
  Administrators can grant users the ability to assign roles within groups. However, these users can only assign roles that they already have.
• Time-limited role
  Time-limited roles give users the defined role during the defined time period.