---
sourceDocument: Brazil Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Role requirements for Unified Secrets Gateway

# Role requirements for Unified Secrets Gateway {#ariaid-title1}

Release version: Brazil  
Updated September 18, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Learn about the roles required to configure Unified Secrets Gateway (USG).

## Required roles

Managing Unified Secrets Gateway requires the following roles. Since USG is based on the Key Management Framework, there are roles common to both.

* Admin
* sn_kmf.cryptographic_manager

For complete details on roles, see [Roles installed with Key Management Framework](https://www.servicenow.com/docs/r/oL66E_cwDD_tnWQYzYPRdA/myGk4UCF~sLwalD0AjDxdA?section=kmf-roles).

## Admin or KMF Cryptographic Manager

Users with the Admin or KMF Cryptographic Manager role can create and update alias groups, identity groups, and consumer grants. Admins and KMF cryptographic managers can also create and add members to identity groups.

## Assign a role to a user

Use the following procedure to assign the KMF Cryptographic Manager role to a user.

1. Navigate to AllSystem SecurityUsers.
2. Select a user that needs to configure USG.
3. In the Roles related list, select Edit.
4. Search for sn_kmf.cryptographic_manager and add the role to the selected user.
5. Select Save.

*[\>]: and then