Managing roles

Administrators can create and configure roles that grant specific permissions, which govern what users and groups with that role can do.

• All ServiceNow roles
  Use this filterable table to review a complete list of roles used in ServiceNow instances. The table includes important details for all base system roles as well as any roles added by installed plugins.
• Base system roles
  Administrators can assign one or more base system user roles to grant access to base system platform features and applications.
• System roles
  Administrators can control access to features and capabilities on a ServiceNow instance by assigning roles to users.
• Create a role
  Create a role to control access to features and capabilities in applications and modules. The new role doesn’t have access to any application or module until you add other roles to it, or add it to the appropriate applications and modules.
• Audit user roles
  Changes to user roles are tracked in the Audit Roles [sys_audit_role] table.
• Delegating roles
  Administrators can grant users the ability to assign roles within groups. However, these users can only assign roles that they already have.
• Grant a time-limited user role
  Learn how to assign a role to a user temporarily. Use this feature if you have a user who needs to perform a one-time action that is normally outside their roles.