---
sourceDocument: Brazil Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Roles

# Roles installed with Code Signing {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Code Signing includes the following roles.

## Code signing admin \[codesigning_admin\] {#ariaid-title2}

Use the code signing admin role to assign codesigning_manager and codesigning_auditor roles to other users.

### Contains Roles {#cs-role-1__section-feature-role-contains-roles}

List of roles contained within the role.

None.

### Groups {#cs-role-1__section-feature-role-groups}

List of groups this role is assigned to by default.

None.

### Special considerations {#cs-role-1__section-feature-role-considerations}

Avoid granting an admin role when more specialized roles are available.

## Code signing manager \[codesigning_manager\] {#ariaid-title3}

Use the code signing manager role to create and update signature configuration, and create and run code signing jobs.

### Contains Roles {#cs-role-2__section-feature-role-contains-roles}

List of roles contained within the role.

None.

### Groups {#cs-role-2__section-feature-role-groups}

List of groups this role is assigned to by default.

None.

### Special considerations {#cs-role-2__section-feature-role-considerations}

None.

## Code signing auditor \[codesigning_auditor\] {#ariaid-title4}

Use the code signing auditor role to view signature configurations, signing jobs, and Code Signing change audit data. The auditor role does not have create or write access to code signing assets.

### Contains Roles {#cs-role-3__section-feature-role-contains-roles}

List of roles contained within the role.

None.

### Groups {#cs-role-3__section-feature-role-groups}

List of groups this role is assigned to by default.

None.

### Special considerations {#cs-role-3__section-feature-role-considerations}

This role grants read and reporting access to the sn_cse_vault_codesigning_audit_data table, which records changes to protected records. No role grants create, update, or delete access to this table. For more
information, see [Code Signing change audit data](https://www.servicenow.com/docs/dtD~M_tFXVDY1B9ocvg5Ng "Review the create, update, and delete operations that users perform on records protected by Code Signing.").