---
sourceDocument: Xanadu Governance, Risk, and Compliance
sourceDocumentLink: https://www.servicenow.com/docs/r/xanadu/governance-risk-compliance

 Release :

    - xanadu

ft:locale :

    - en-US

ft:publication_title :

    - Xanadu Governance, Risk, and Compliance

ft:clusterId :

    - grc

bundleId :

    - grc

workflow :

    - Technology


---

# Roles installed with the GRC Risk Workspace

# Roles installed with the GRC
Risk Workspace {#ariaid-title1}

* Release version: Xanadu
* 
* Updated November 4, 2024
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

The GRC: Risk Workspace application installs the
roles for Operational risk manager and IT risk manager for the users to perform their respective
tasks.
{#roles-installed-with-risk-ws__table_m2t_czq_mqb__entry__3}

| Role title \[name\] | Description | Contains roles |
|-|-|-|
| Operational risk manager (sn_risk_workspace.operational_risk_manager) | Operational Risk Managers are a part of the operational risk team that manages the risk posture of the organization. They can do the following tasks: * Perform risk assessments * View risk events related data * View the heatmaps for the risk assessments * Create feedback on records or fields in a record * Create, modify, and delete any risk assessment projects. {#roles-installed-with-risk-ws__ul_up2_dgr_mqb} Note: The Operational risk manager role is available only when both the Risk Workspace and Advanced Risk applications are installed. | * sn_risk.manager * sn_compliance.manager * sn_audit.manager * sn_rvw_feedback.reviewer * sn_risk_advanced.risk_asmt_project_manager {#roles-installed-with-risk-ws__ul_o5k_zfr_mqb} |
| IT Risk manager (sn_risk_workspace.IT_risk_manager) | IT risk managers work with various stakeholders to ensure that IT risks are managed within the risk appetite of the organization. They can do the following tasks: * Identify risks to assess * Manage risk responses * Create key risk indicators * Create feedback on records or fields in a record * Create, modify, and delete any risk assessment projects. {#roles-installed-with-risk-ws__ul_xcm_jmr_mqb} | * sn_risk.manager * sn_compliance.manager * sn_audit.manager * sn_rvw_feedback.reviewer * sn_risk_advanced.risk_asmt_project_manager {#roles-installed-with-risk-ws__ul_c3f_xfr_mqb} |
| Business operational risk manager (sn_risk_workspace.business_op_risk_manager) manager | Business operational risk managers are the first lines of defense for each individual line of business. They are responsible to manage the risk posture of their specific business units. | * sn_risk.user * sn_compliance.user * sn_audit.user * sn_rvw_feedback.respondent * sn_risk_advanced.risk_asmt_project_user {#roles-installed-with-risk-ws__ul_ytc_f2j_xsb} |
[Table 1. Roles and their descriptions]

{#roles-installed-with-risk-ws__table_m2t_czq_mqb}