Assign Operational Technology Manager roles

Assign roles to your users so that you can control their access to the features, capabilities, and data in the Operational Technology Manager application.

Before you begin

Role required: admin

About this task

Users with the roles that are listed in the following table can use the Operational Technology Manager application.

If you want to configure site users, you can create and assign user criteria for equipment model entity site users. For more information, see Assign or remove equipment model site access for non-administrators.

Role	Description
Operational Technology Discovery Administrator [ot_discovery_admin]	Can run the Discovery for Operational Technology process, but cannot access the Configuration Management Database (CMDB) to view the configuration items (CIs) and related Operational Technology (OT) entities that are created from discovered items. To learn more, see Create an Operational Technology discovery schedule and run the Discovery process.
Operational Technology Manager Viewer [cmdb_ot_viewer]	Read-only access to Operational Technology (OT) device records.
Operational Technology Manager Editor [cmdb_ot_editor]	Create, read, update, and delete access for Operation Technology (OT) extension classes. Note: Users assigned the cmdb_ot_editor role can edit and delete only OT configuration items (CIs), and don't have the ability to edit IT CIs.
Operational Technology Manager Admin [cmdb_ot_admin]	Create, read, update, and delete access for Operational Technology (OT) device records. Can also edit and manage specific configurations in the OT entity type. To learn more, see Operation Technology (OT) extension classes. Note: Users assigned the cmdb_ot_admin role can edit and delete only OT configuration items (CIs), and don't have the ability to edit IT CIs.

Procedure

Assign roles to users and groups by using the ServiceNow AI Platform user administration feature.

Task	User administration feature
Assign a role to a user	See Assign a role to a user.
Assign a role to a group	See Assign a role to a group.