Exploring user administration
Summarize
Summary of Exploring user administration
User administration in the ServiceNow AI Platform enables administrators to control access to features and data by managing users, groups, and roles. This flexible and scalable approach ensures that users have appropriate permissions, supporting organizational security policies and safeguarding sensitive data. User, group, and role configurations can be adjusted over time to meet evolving organizational needs.
Show less
User, Group, and Role Management
- Creating Users: User accounts with unique login IDs and passwords are created to grant individuals access. Permissions are assigned through roles that define what users can do within the platform.
- Creating Groups: Groups consist of users with similar roles or permissions. Assigning roles to groups allows efficient permission management for multiple users simultaneously. Administrators with the useradmin role can create and edit groups. Group membership is viewable under All > User Administration > Groups.
- Managing Roles: Roles specify the activities users or groups can perform, such as reading, writing, or deleting records. Roles can be assigned directly to users or to groups to simplify administration. Roles can include other roles, inheriting their permissions. Role records are stored in the Roles [sysuserrole] table.
Access Control Best Practices
To streamline user administration, assign roles to groups rather than individual users. Create groups tailored to specific personas by bundling all necessary roles, then assign users to these groups. This approach helps maintain consistent and scalable access control.
Monitoring and Preferences
- Instance Usage Monitoring: Users with the admin or usageadmin roles can track application and ServiceNow Store usage through dedicated dashboards.
- User Activity Monitoring: Administrators can impersonate users, manage sessions, and control non-interactive sessions to monitor and troubleshoot user activities.
- User Preferences: Users can customize UI features such as list row counts or response time displays. Administrators can modify or delete these preferences as needed.
Subscription Management
Subscription management allows proactive oversight of subscriptions, including those that are per-user. This helps organizations monitor subscription usage and ensure compliance.
User administration controls who can access features and data on your instance by managing users, groups, and roles.
Overview of user administration
Creating users, groups, and roles provide a flexible and scalable way to manage access to features on the ServiceNow AI Platform. By creating user accounts, assigning users to groups, and defining roles and permissions, administrators can verify that users have the appropriate level of access to applications and data. This enables organizations to control access to sensitive data, support organizational policies, and improve overall security. Additionally, users, groups, and roles can be easily managed and modified over time as organizational needs change.
Workflow
Subscriptions, users, groups, and roles work together to help you define who can access features on your instance.
- Subscription Management
Understand your subscriptions. Subscription management enables you to manage your subscriptions proactively and monitor subscription usage on your instances.
Subscriptions may include per-user subscriptions. For more information, see Managing per-user subscriptions in Subscription Management.
- Creating users, companies, and departments
Create an account record for the individuals who have access to your instance. Each user account has a unique login ID, password, and set of permissions (roles) that define what they can do and access within the platform.
- Creating groups
Define groups that have similar roles or permissions. Groups enable you to apply permissions (roles) to multiple users at the same time. When a user is a member of a group, that user has the same permissions that have been defined for the group.
You can view group members by navigating to . Select a group name and view the members in the Group Members related list.
- Managing roles
Roles describe the types of activities that a user can perform on the instance. Each role has a set of permissions that can govern what the users and groups can do, such as read, write, create, or delete records. Roles can be assigned to users and groups. Users can have multiple roles.
For a complete list of the roles included with the ServiceNow AI Platform, see Base system roles.
Role records are stored in the Roles [sys_user_role] table.
- Monitoring instance usage
Users with the admin or usage_admin role can view the Application usage overview and ServiceNow Store usage overview dashboards to track instance usage.
- Monitoring user activity
Users with the admin role can impersonate users, manage user sessions, and use non-interactive sessions.
User preferences
Users can configure many UI features. Some examples include the number of rows per page in a list or whether the response time displays at the bottom of a list or form. Administrators can modify or delete these preferences as needed. For more information, see User preferences.
User groups
A group is a set of users who share a common purpose. Groups may perform tasks such as approving change requests, resolving incidents, receiving email notifications, or performing work order tasks. Any business rules, assignment rules, system roles, or attributes that refer to the group apply to all group members automatically. Users with the user_admin role can create and edit groups.
When possible, simplify user administration by assigning roles to groups. Create groups that contain all the roles necessary for specific personas, and then assign users to those groups.
You can view group members by navigating to . Select a group name and view the members in the Group Members related list.
Group records are stored in the Groups [sys_user_group] table.
User roles
Roles control access to features and capabilities in applications and modules. The admin role provides access to all features and capabilities.
After access has been granted to a role, all the groups or users assigned to the role are granted the access. Roles can contain other roles, and any access granted to a role is granted to any role that contains it.
For a complete list of the roles included with the ServiceNow platform, see Base system roles.
When possible, simplify user administration by assigning roles to groups. Create groups that contain all the roles necessary for specific personas, and then assign users to those groups.
Role records are stored in the Roles [sys_user_role] table.