Creator Studio roles and personas

  • Release version: Washingtondc
  • Updated February 2, 2024
  • 4 minutes to read
    • Summarize
    Summarized using AI
    This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.

    Summary of Creator Studio roles and personas

    Creator Studio enables users to build applications without writing code by assigning specific roles that control access and permissions. Administrators are responsible for assigning these roles to ensure proper management of app development and to prevent the creation of redundant applications.

    Show full answer Show less

    Key Features

    • Roles: There are four main roles in Creator Studio:
      • Low-code/Citizen Developer: Users with the roles sncreatorstudio.user or sncreatorstudio.restricteduser can submit app ideas and create apps if approved.
      • App Engine Admin: Manages app development processes, reviews app ideas, and handles deployments with the appengineadmin role.
      • Security Admin: Responsible for creating and modifying roles and access control lists at the platform level.
      • System Administrator: Has comprehensive access to all system features and data, requiring careful privilege management.
    • User Groups: Groups facilitate access control:
      • Creator Studio Users: Automatically approved to create apps, assigned sncreatorstudio.user.
      • Creator Studio Restricted Users: Need to request app creation, assigned sncreatorstudio.restricteduser.
    • Collaboration: Permissions are managed on an app-by-app basis, allowing users to invite others to collaborate on specific applications.

    Key Outcomes

    With the correct roles assigned, users can effectively manage app development while maintaining control over access and permissions. The structured approach prevents the proliferation of unnecessary applications and promotes organized collaboration among team members. Proper role assignment also ensures that users can utilize features like the Collaboration Approval Workflow, provided all instances are compatible.

    Roles control what everyone you work with can do in Creator Studio. Administrators assign roles to give team members permission to configure or use Creator Studio.

    The two roles for Creator Studio are used to restrict access from creating new apps, which helps make sure your instance isn't overfilled with redundant, unplanned, or unused apps.

    Personas that use Creator Studio

    Personas aren’t explicitly part of Creator Studio, but administrators assign roles to give team members permission to configure or use Creator Studio.

    Low-code/citizen developer
    Low-code/citizen developers are tech savvy and interested in creating apps. Though they might not have formal coding or app development training, citizen developers can submit ideas for new apps and, if approved, build them using Creator Studio.

    Low-code/citizen developers have either the sn_creatorstudio.user or sn_creatorstudio.restricted_user role.

    App Engine admin
    App Engine admins manage all processes related to app development in Creator Studio. They review new app ideas, handle app deployment, and manage collaborators, usually in the App Engine Management Center.

    App Engine admins have the app_engine_admin role and must be in the app_engine_admin group.

    Security admin
    The security admin creates and modifies roles and access control lists for apps. This role is set on the platform level, and it is required for making updates to roles in Creator Studio.
    System administrator
    The system administrator has access to all system features, functions, and data, regardless of security constraints. Grant this privilege carefully. If you have sensitive information, such as HR records, that you must protect, create a custom admin role for that area and train a person who is authorized to see those records to act as the administrator.

    Roles and what they can do in Creator Studio

    In addition to the roles in the following table, users with the admin and delegated_developer roles can also access Creator Studio.

    For complete details on which roles each role contains, see Components installed with Creator Studio.

    Table 1. Creator Studio roles
    Role Name Description
    Creator Studio User sn_creatorstudio.user
    • Users can create apps in Creator Studio.
    • The user is automatically delegated as the app owner. For more information, see Delegated development and deployment.
    • Contains sn_g_app_creator.app_creator.
    Note:
    This role gets assigned the delegated_developer role when they create or get access to an app.
    Creator Studio Restricted User sn_creatorstudio.restricted_user
    • Users can't create apps in Creator Studio.
    • Users can request apps to be created for them, and to work on an app.
    • Users can work on apps that they've been designated as developers for.
    • When assigned to work on an app, this user gets the delegated_developer role for that app.
    App Engine Admin app_engine_admin
    • Approve requests from restricted users to create an app.
    • Approve collaboration requests.
    • Contains sn_creator_studio.admin_write and sn_creator_studio.basic_write to enable admins to see the apps they need to approve.
    Note:

    To ensure that users can use the Collaboration Approval Workflow regardless of instance versions, admins must assign the catalog _builder_editor role to Creator Studio user groups.

    User groups and what they can do in Creator Studio

    Groups are a standard functionality that help you quickly control people's access to Creator Studio by adding them to a group.

    Table 2. Creator studio user groups
    Group Description
    Creator Studio Users
    • Users are automatically approved to create apps in Creator Studio.
    • Contains sn_creatorstudio.user.
    Creator Studio Restricted Users
    • Users in this group need to request applications be created in Creator Studio on their behalf.
    • Contains sn_creatorstudio.restricted_user.

    Developer roles and testing apps on instances

    If you have a Creator Studio role of sn_creatorstudio.user or sn_creatorstudio.restricted_user, you won't be able to test the apps you build on the non-production instance's Request App Workspace. You should be able to test the app on the non-production instance using Creator Studio's app previews. You will be able to test the apps as a fulfiller in the workspace on the app that's been deployed to production.

    Use case:

    Maria is in the Creator Studio Users group, so when she builds an app, she'll get delegated development permissions for that app. Maria can then publish her request form, and if there are no roles required for the form, she'll be able to submit requests with the form.

    However, Maria won't be able to fulfill requests or access the Request App Workspace because she won't have the x_acme_maria_app.agent role, and Maria can't give that role to herself. Admins must assign additional roles as necessary.

    Collaboration roles and instances on different versions

    As admins implement Creator Studio, they may have it installed on a non-production instance while their production instance is on a previous version of the ServiceNow AI Platform that doesn't have Creator Studio. This mis-match of instance versions affects the Collaboration Approval Workflow, which specifies the non-production instance as the source and the production instance as the controller. If the controller doesn't have the version of the collaboration plugin that supports Creator Studio, collaboration is unsupported.

    To ensure that users can use the Collaboration Approval Workflow regardless of instance versions, admins must assign the catalog _builder_editor role to Creator Studio user groups.

    Roles and app development collaboration

    Roles define user access to Creator Studio. Permission to work on individual apps is controlled on an app-by-app basis. That is, you must manage the collaborators for each app by inviting other citizen developers to work on the app with you, or request to join someone else's app. For more information, see Collaboration in Creator Studio.