Manage access to an established connection using roles

  • Release version: Zurich
  • Updated July 31, 2025
  • 2 minutes to read

    • Manage which data stewards can access an established connection and create data fabric tables.

    Before you begin

    Role required: df_connection_admin

    About this task

    Access to a zero copy connection in Workflow Data Fabric Hub is controlled by the connection admin. The connection admin grants access using custom roles that identify the data stewards responsible for managing the quality and integrity of the data provided by the connection.

    For example, an instance admin can create a custom role for an application and assign it to each of the data stewards who manage the data for that application. Once the role and the data stewards are defined, a connection admin can add the custom role to an established connection. When a custom role is added to the connection, it inherits the df_data_steward role, which grants access to the data stewards who have the custom role.

    Note:
    Data stewards can access an established connection if they have a role that inherits the df_data_steward role. Users who are granted the df_data_steward role directly can view the Workflow Data Fabric Hub but can't access any established connections.

    Procedure

    1. Navigate to the Established connections tab in Workflow Data Fabric Hub in one of the following ways:
      • Navigate to All > Workflow Data Fabric Hub > Established connections.
      • Navigate to Admin > Workflow Data Fabric Hub > Established connections.
    2. Select the connection that you want to configure.
    3. Select the Access Control tab.
    4. Optional: Grant data steward access by adding one or more roles.
      1. Select Manage Access.
      2. Browse or search for the role that you want to configure.
      3. Select the check box next to the role.
      4. Optional: Search and add additional roles as needed.
      5. Select Save changes.
    5. Optional: Remove data steward access from one or more roles.
      1. Select Manage Access.
      2. Browse or search for the role that you want to update.
      3. Clear the check box next to the role that you want to remove.
      4. Optional: Search and remove additional roles as needed.
      5. Select Save changes.

    Result

    The df_data_steward role is granted to or removed from the selected roles. Each data steward with a role that contains the df_data_steward role can access the connection to create data fabric tables.

    Assigning data steward access to separate connections

    1. The connection admin creates separate connections for accessing external ITSM and finance data in Workflow Data Fabric Hub.
    2. The instance admin creates the following custom roles in the ServiceNow AI Platform:
      • df_ITSM_data_steward
      • df_FINANCE_data_steward
    3. The instance admin identifies the users who are responsible for creating and maintaining data fabric tables for the ITSM and finance applications.
    4. The instance admin assigns the ITSM users to the df_ITSM_data_steward role and the finance users to the df_FINANCE_data_steward role.
    5. The connection admin grants the df_data_steward role to ITSM data stewards by adding to the df_ITSM_data_steward role to the ITSM connection in Workflow Data Fabric Hub.
    6. The connection admin grants the df_data_steward role to finance data stewards by adding the df_FINANCE_data_steward role to the finance connection in Workflow Data Fabric Hub.

    After access is granted, ITSM data stewards can only access and manage external ITSM data, while finance data stewards can only access and manage external finance data.