---
sourceDocument: Brazil Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# View permissions for a role

# View permissions for a role {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Use Access Analyzer to view permissions for a selected role.

## Before you begin

Role required: access_analyzer_admin

This procedure explains how to view the permissions for a specific role (such as user_admin) on a REST API endpoint by using the Evaluate access feature in Access Analyzer.  
Note:  
Access Analyzer is a ServiceNow® Store product.

## Procedure

1. Navigate to AllAccess AnalyzerAnalyze Permissions.  
   The system displays the Analyze access and permissions home page.
2. Select your criteria as follows:  
   {#view-permissions-for-a-role__table_cpw_mgd_qxb__entry__2}

   | Field | Description |
   |-|-|
   | Analyze by | Role option. |
   | Select user | Role to select from the list. For example, user_admin. |
   | Rule type | Access for the following: * Table * UI page * REST Endpoint * Client callable script include * AI Agent * Agentic workflow {#view-permissions-for-a-role__ul_ocs_gt4_g3c} For example, REST Endpoint. |
   | REST endpoint | REST endpoint. For example, <kbd class="ph userinput">/api/global/user_role_inheritance</kbd>. Note: The complete REST endpoint must be used when using the selected field. |
   | REST endpoint method | REST endpoint method. For example, GET. |
   [Table 1. Select your criteria for analyzing access and permissions]

   {#view-permissions-for-a-role__table_cpw_mgd_qxb}
3. Specify the description in the Description field.
4. Select Analyze permissions.  

   The Access results for the user_admin role are displayed.

   The results can be read by referring to the Legends, access control list (ACL), IAccessHandler, and
   Data filters.

   The overall access for the role is passed, which means that the role (user_admin) can access the REST endpoint for
   the selected GET method.
{#view-permissions-for-a-role__steps_l3f_qgg_qxb}

*[\>]: and then