{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":40228,"path":"platform-administration/user-administration/r_BaseSystemRoles.md","title":"Base system roles","bundle":null,"doc_type":null,"release":"australia","body":"\n# Base system roles\n\nAdministrators can assign one or more base system user roles to grant access to base system platform features and applications.\n\nTo learn more about managing per-user subscriptions, see [Managing per-user subscriptions in Subscription Management](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-administration/managing-user-subscriptions-v2.md) and contact your account representative.\n\n**Important:** Avoid granting an admin role when more specialized roles are available.\n\n## Administrator \\[admin\\]\n\nThe administrator role. This role has access to all system features, functions, and data because administrators can override access control list \\(ACL\\) rules and pass all role checks. Avoid assigning this role to your users when more targeted roles are available.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    -   ais\\_admin\n    -   announcement\\_admin\n    -   catalog\n    -   catalog\\_admin\n    -   catalog\\_builder\\_editor\n    -   catalog\\_lookup\\_admin\n    -   catalog\\_template\\_editor\n    -   chat\\_admin\n    -   evam\\_admin\n    -   image\\_admin\n    -   import\\_admin\n    -   import\\_scheduler\n    -   import\\_set\\_loader\n    -   import\\_transformer\n    -   live\\_feed\\_admin\n    -   ml\\_admin\n    -   ml\\_labeler\n    -   nlu\\_admin\n    -   nlu\\_editor\n    -   nlu\\_user\n    -   pa\\_data\\_collector\n    -   pa\\_viewer\n    -   personalize\\_dictionary\n    -   platform\\_ml\\_create\n    -   platform\\_ml\\_read\n    -   platform\\_ml\\_write\n    -   search\\_application\\_admin\n    -   search\\_relevancy\\_model\\_admin\n    -   sn\\_ace.ace\\_user\n    -   sn\\_employee.admin\n    -   sn\\_hr\\_sp.admin\n    -   sn\\_hr\\_sp.esc\\_admin\n    -   sn\\_nlu\\_workbench.nlu\\_feedback\\_admin\n    -   sn\\_templated\\_snip.template\\_snippet\\_admin\n    -   sn\\_templated\\_snip.template\\_snippet\\_reader\n    -   sn\\_templated\\_snip.template\\_snippet\\_writer\n    -   sp\\_admin\n    -   taxonomy\\_admin\n    -   user\\_criteria\\_admin\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    Grant this privilege carefully. If you have sensitive information, such as HR records, that you must protect, create a custom admin role for that area. Train any users authorized to see those records to act as the administrator. Also note the [Special Administrative Roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-administration/user-administration/r_SpecialAdministrativeRoles.md).\n\n    **Note:** Users with roles related to the Key Management Framework can only be modified by admins with the kmf\\_admin role. For details on KMF roles, see [Roles installed with Key Management Framework](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/kmf-roles.md).\n\n\n## Agent administrator \\[agent\\_admin\\]\n\nAgent administrators can download and administer the built-in system agent. They can manage MID Server-related scripts.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    -   agent\\_security\\_admin\n    -   view\\_changer\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None.\n\n\n## AI search administrator \\[ais\\_admin\\]\n\nAI search administrators can query, create, update, and delete indexing and search settings and log messages through the [AI Search](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-administration/ai-search/overview-ais.md) application.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    None\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None.\n\n\n## Application client company installer \\[app\\_client\\_company\\_installer\\]\n\nUsers assigned the app\\_client\\_company\\_installer role can install applications containing the same company as the currently logged in instance. Assigning this role enables first-time installation of applications for the company associated with the current instance. Users with this role can’t install an application for another company.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    None\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None\n\n\n## Application client user \\[app\\_client\\_user\\]\n\nApplication client users can install applications containing the same company as the currently logged in instance.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    None\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None\n\n\n## Approval administrator \\[approval\\_admin\\]\n\nApproval administrators can view or modify approval requests not directly assigned to them. Use the approver\\_user role to enable approvers to view or modify only requests directly assigned to them.\n\nFulfillers may approve within the product to which they are subscribed \\(ITSM Fulfiller approving within ITSM\\). This approval may be in the platform or via email. No additional entitlement is required.\n\nFulfillers may not approve beyond the product to which they are subscribed \\(ITSM Fulfiller approving within Procurement, GRC, etc.\\). This approval would need an additional approval entitlement for the user.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    None\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None.\n\n\n## Approver users \\[approver\\_user\\]\n\nApprover users can modify requests for approval routed to them. They also have all the capabilities of requesters.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    None\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    There’s a fee associated with this role. Don’t assign it to users without confirming your organization has the appropriate entitlement.\n\n\n## Asset user \\[asset\\]\n\nAsset users can manage hardware and software assets.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    -   inventory\\_user\n    -   cmdb\\_query\\_builder\n    -   canvas\\_user\n    -   financial\\_mgmt\\_user\n    -   cmdb\\_read\n    -   contract\\_manager\n    -   category\\_manager\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None\n\n\n## Assignment rule administrator \\[assignment\\_rule\\_admin\\]\n\nAssignment rule administrators can manage assignment rules.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    None\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None.\n\n\n## Business process administrator \\[business\\_process\\_admin\\]\n\nBusiness process admins can create, read, update, and delete all records and their relationships in the business process.\n\nIn the context of Governance, Risk, and Compliance \\(GRC\\), users with the sn\\_grc.admin role who manage GRC applications and their setup automatically gain access to this role. This access enables the GRC administrators to administer a business process and its records similar to other GRC tables.\n\n-   **Contains Roles**\n\n    List of roles contained within the role: business\\_process\\_manager.\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    This role is assigned to users who are administrators and have thorough information and training on business processes. None.\n\n\n## Business process manager \\[business\\_process\\_manager\\]\n\nBusiness process managers can create, read, and update any business process and manage the relationship of business processes with other records. This role is assigned to business process managers who are usually specialists and manage multiple business processes in the organization. Assign this role to users who generally work with other employees and are experts around business processes.\n\nIn the context of GRC, users with the sn\\_grc.manager role automatically inherit this role that enables them to manage the business processes for the entire organization.\n\n-   **Contains Roles**\n\n    List of roles contained within the role - business\\_process\\_user.\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None\n\n\n## Business process user \\[business\\_process\\_user\\]\n\nBusiness process users can update the business processes that a user owns and can also read any business process. This role must be assigned to the respective process owners. This role can also be provided to users who are required to view the business processes in the organization and understand them better.\n\nIn the context of GRC, users with the sn\\_risk.user role are automatically assigned this role. This role enables users to manage the business processes that they own as well as read all business processes.\n\n-   **Contains Roles**\n\n    List of roles contained within the role- cmdb\\_read.\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None\n\n\n## Catalog administrator \\[catalog\\_admin\\]\n\nCatalog administrators can manage the Service Catalog application, including catalog categories and items.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    -   user\\_criteria\\_admin\n    -   catalog\\_builder\\_editor\n    -   catalog\\_template\\_editor\n    -   catalog\n    -   catalog\\_lookup\\_admin\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None.\n\n\n## Catalog editor \\[catalog\\_editor\\]\n\nCatalog editors can create, modify, and publish items within categories that they’re assigned to.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    None\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None\n\n\n## Catalog item designer \\[catalog\\_item\\_designer\\]\n\nCatalog item designers can view the status of their category requests. This role is granted automatically to users when they make a request for an item designer category.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    None\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None\n\n\n## Catalog manager \\[catalog\\_manager\\]\n\nCatalog managers can view and assign catalog editors to their categories. They can also create, modify, and publish items within their categories.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    None\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None\n\n\n## Catalog user \\[catalog\\]\n\nCatalog users have read and some write access to all Service Catalog Requests, Tasks, and Items.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    None\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    -   Catalog Request Approvers > $1000\n    -   Catalog Request Approvers for Sales\n    -   Field Services\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None\n\n\n## Category manager \\[category\\_manager\\]\n\nCategory managers can create, edit, and delete model categories.\n\n-   **Contains Roles**\n\n    List of roles contained within the role - model\\_manager.\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None\n\n\n## CMDB administrator \\[sn\\_cmdb\\_admin\\]\n\nThe configuration management data base \\(CMDB\\) administrator is a key role required for interacting with the CMDB Workspaceand the Service Graph Workspace. CMDB administrators can access all CMDB data, tools, and UIs within the CMDB Workspaceand Service Graph Workspace. Users with this role can set policies that an editor can't, such as class manager and app service requirements.\n\nAs you drill down in the CMDB Workspaceor the Service Graph Workspace, there are some dashboards and list views that require specific roles in addition to the CMDB Admin, CMDB Editor, or CMDB User roles.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    -   canvas\\_admin\n    -   cmdb\\_ms\\_admin\n    -   data\\_manager\\_admin\n    -   sn\\_cmdb\\_editor\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None.\n\n\n## CMDB de-duplication administrator \\[cmdb\\_dedup\\_admin\\]\n\nCMDB de-duplication admins can review and remediate CMDB de-duplication tasks.\n\n-   **Contains Roles**\n\n    List of roles contained within the role - cmdb\\_read.\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None.\n\n\n## CMDB editor \\[sn\\_cmdb\\_editor\\]\n\nA key role required for interacting with CMDB Workspaceand the Service Graph Workspace. CMDB editors can create, edit, and delete CMDB records but can't change policies such as data manager, class manager within CMDB Workspaceor Service Graph Workspace.\n\nAs you drill down in the CMDB Workspaceor Service Graph Workspace, there are some dashboards and list views that require specific roles in addition to the key CMDB Admin, CMDB Editor, or CMDB User roles.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    -   cmdb\\_ms\\_editor\n    -   sn\\_cmdb\\_user\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None\n\n\n## CMDB multi-source administrator \\[cmdb\\_ms\\_admin\\]\n\nThe CMDB multi-source administrator can create and run a query and can modify CMDB 360 properties. Contains the cmdb\\_ms\\_write role.\n\n-   **Contains Roles**\n\n    List of roles contained within the role - cmdb\\_ms\\_editor.\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None.\n\n\n## CMDB multi-source editor \\[cmdb\\_ms\\_editor\\]\n\nCMDB multi-source editors can create and query, read, and write CMDB records, but can't perform recomputing actions.\n\n-   **Contains Roles**\n\n    List of roles contained within the role - cmdb\\_ms\\_user.\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None\n\n\n## CMDB multi-source user \\[cmdb\\_ms\\_user\\]\n\nCMDB multi-source users have read and execute access to the multi-source queries.\n\n-   **Contains Roles**\n\n    List of roles contained within the role - cmdb\\_read.\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None\n\n\n## CMDB reader \\[cmdb\\_read\\]\n\nCMDB reader users can read data from the CMDB hierarchy.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    None\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None\n\n\n## CMDB user \\[sn\\_cmdb\\_user\\]\n\nA key role required for interacting with CMDB Workspaceand the Service Graph Workspace. CMDB users have read-only access to CMDB data and basic UI within CMDB Workspaceand Service Graph Workspace.\n\nAs you drill down in the CMDB Workspaceor in Service Graph Workspace, there are some dashboards and list views that require specific roles in addition to the key CMDB Admin, CMDB Editor, or CMDB User roles.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    -   app\\_service\\_user\n    -   canvas\\_user\n    -   cmdb\\_ms\\_user\n    -   cmdb\\_query\\_builder\n    -   data\\_manager\\_user\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None\n\n\n## Contract manager \\[contract\\_manager\\]\n\nContract managers can create, edit, and delete contracts through the Contract Management application.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    -   canvas\\_user\n    -   financial\\_mgmt\\_user\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None\n\n\n## CreateNow unlimited \\[unlimited\\_createnow\\]\n\nRole for CreateNow unlimited licensed users.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    None\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None\n\n\n## Data classification administrator \\[data\\_classification\\_admin\\]\n\nData classification administrators manage all aspects of the Data Classification application, data classification code setup, and assignment.\n\n-   **Contains Roles**\n\n    List of roles contained within the role - data\\_classification\\_auditor.\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None.\n\n\n## Data classification auditor \\[data\\_classification\\_auditor\\]\n\nData classification auditors audit Data Classification code assignments.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    None\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None\n\n\n## Enterprise CMDB administrator \\[ecmdb\\_admin\\]\n\nEnterprise CMDB administrators can perform administrative tasks and access tables and records in Enterprise CMDB.\n\n-   **Contains Roles**\n\n    List of roles contained within the role - cmdb\\_read.\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None.\n\n\n## Filter administrator \\[filter\\_admin\\]\n\nFilter administrators can create, edit, and delete filter \\[sys\\_filter\\] records.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    -   filter\\_global\n    -   filter\\_group\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None.\n\n\n## Filter group user \\[filter\\_group\\]\n\nFilter group users can create filters that belong to groups of which the user is a member.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    None\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None\n\n\n## Gauge maker \\[gauge\\_maker\\]\n\nGauge makers can create gauges from reports. Starting with Helsinki, reports are no longer made into gauges.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    None\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None\n\n\n## Global filter user \\[filter\\_global\\]\n\nGlobal filter users can create global filter \\[sys\\_filter\\] records.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    None\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None\n\n\n## Global template editor \\[template\\_editor\\_global\\]\n\nUsers with the template\\_editor\\_global role can create templates for global use.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    None\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None\n\n\n## Group template editor \\[template\\_editor\\_group\\]\n\nUsers with the template\\_editor\\_group role can create templates for groups. \\(Users must also be assigned the template\\_read\\_global role\\)\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    None\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None\n\n\n## Guided tour administrator \\[guided\\_tour\\_admin\\]\n\nGuided tour administrators can create, modify, and delete guided tour \\[sys\\_embedded\\_tour\\_guide\\] records.\n\n-   **Contains Roles**\n\n    List of roles contained within the role - sn\\_tourbuilder.tour\\_admin.\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None.\n\n\n## Image administrator \\[image\\_admin\\]\n\nImage administrators can create, modify, and delete image \\[db\\_image\\] records.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    None\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None.\n\n\n## Impersonator \\[impersonator\\]\n\nImpersonators can impersonate users.\n\n**Warning:** This role doesn’t enable the impersonation of admin users.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    None\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    For details on impersonation, see [Base system roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-administration/user-administration/r_BaseSystemRoles.md).\n\n\n## Import administrator \\[import\\_admin\\]\n\nImport administrators can manage all aspects of import set \\[sys\\_import\\_set\\] records and imports.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    -   import\\_set\\_loader\n    -   import\\_transformer\n    -   import\\_scheduler\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None.\n\n\n## Import scheduler \\[import\\_scheduler\\]\n\nImport schedulers can schedule imports.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    None\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    **Warning:** Grant this role carefully. The import\\_scheduler can execute scripts with administrator level privileges.\n\n\n## Import set loader \\[import\\_set\\_loader\\]\n\nImport set loader users can load import set \\[sys\\_import\\_set\\] records.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    None\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None\n\n\n## Import transformer \\[import\\_transformer\\]\n\nImport transformer users can manage import set transform map \\[sys\\_transform\\_map\\] records and run transforms.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    None\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None\n\n\n## Inventory administrator \\[inventory\\_admin\\]\n\nInventory administrators administer stockrooms, stock models, stock rules.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    -   inventory\\_user\n    -   canvas\\_user\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None.\n\n\n## Inventory user \\[inventory\\_user\\]\n\nInventory users have access to stock information.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    None\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None\n\n\n## ITIL\n\nInformation Technology Infrastructure Library \\(ITIL\\) users can open, update, close incidents, problems, changes, and read some rules, definitions, and CIs related to CMDB features. This role is the base system technician role. Users with the ITIL role can have tasks assigned to them.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    -   agent\\_workspace\\_user\n    -   app\\_service\\_user\n    -   cmdb\\_query\\_builder\n    -   cmdb\\_read\n    -   dependency\\_views\n    -   email\\_composer\n    -   snc\\_platform\\_rest\\_api\\_access\n    -   sn\\_change\\_write\n    -   sn\\_comm\\_management.comm\\_plan\\_viewer\n    -   sn\\_gd\\_guidance.guidance\\_user\n    -   sn\\_incident\\_write\n    -   sn\\_nb\\_action.next\\_best\\_action\\_user\n    -   sn\\_problem\\_write\n    -   sn\\_request\\_write\n    -   sn\\_sow.sow\\_list\n    -   sn\\_sow.sow\\_user\n    -   sn\\_sttrm\\_condition\\_read\n    -   survey\\_reader\n    -   template\\_editor\n    -   tracked\\_file\\_reader\n    -   view\\_changer\n    -   viz\\_creator\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    -   Field Services\n    -   Catalog Request Approvers > $1000\n    -   Catalog Request Approvers for Sales\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None\n\n\n## ITIL administrator \\[itil\\_admin\\]\n\nITIL administrators can delete incidents, problems, changes, and other related records. This role is intended for team leads.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    -   assessment\\_admin\n    -   sn\\_bm\\_client.benchmark\\_data\\_viewer\n    -   cmdb\\_read\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    Avoid granting admin roles when more specialized roles are available.\n\n\n## Knowledge \\[knowledge\\]\n\nKnowledge users can write, edit, and review knowledge management articles.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    None\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None\n\n\n## Knowledge administrator \\[knowledge\\_admin\\]\n\nKnowledge administrators can manage knowledge bases.\n\n-   **Contains Roles**\n\n    List of roles contained within the role - knowledge.\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None.\n\n\n## List updater \\[list\\_updater\\]\n\nList updater users can select the **Update Entire List** and **Update Selected** menu options on a list.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    None\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None\n\n\n## Maintenance\n\nThis role is reserved for ServiceNow use.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    None\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    This role can’t be assigned or impersonated, and is reserved for ServiceNow use.\n\n\n## MID server \\[mid\\_server\\]\n\nMID server users can access to the tables that MID servers ordinarily use. This role should be granted to your MID servers.\n\n-   **Contains Roles**\n\n    List of roles contained within the role - soap.\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    This role should be assigned to user accounts created for MID servers to interact with your instance. For details, see [Create the MID Server user and grant the role](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/servicenow-platform/t_SetupMIDServerRole.md).\n\n\n## Model manager \\[model\\_manager\\]\n\nModel managers can create, modify, and delete base model \\[cmdb\\_model\\] records.\n\n-   **Contains Roles**\n\n    List of roles contained within the role - catalog\\_editor.\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None.\n\n\n## Personalize \\[personalize\\]\n\nUsers with the personalize role can personalize forms, lists, rules, controls, and scripts.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    -   personalize\\_control\n    -   personalize\\_rules\n    -   personalize\\_dictionary\n    -   personalize\\_choices\n    -   personalize\\_styles\n    -   personalize\\_responses\n    -   personalize\\_list\n    -   personalize\\_form\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None\n\n\n## Personalize choices \\[personalize\\_choices\\]\n\nUsers assigned to the personalize\\_choices role can personalize the choices for a list field.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    None\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None\n\n\n## Personalize control \\[personalize\\_control\\]\n\nPersonalize control users can personalize controls on lists, such as filters, links, and buttons.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    None\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None\n\n\n## Personalize dictionary \\[personalize\\_dictionary\\]\n\nUsers with the personalize\\_dictionary role can personalize dictionary entries and labels.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    None\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None\n\n\n## Personalize form \\[personalize\\_form\\]\n\nUsers with the personalize\\_form role can personalize forms.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    None\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None\n\n\n## Personalize list \\[personalize\\_list\\]\n\nUsers with the personalize\\_list role can personalize lists.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    None\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None\n\n\n## Personalize responses \\[personalize\\_responses\\]\n\nUsers with the personalize\\_form role can personalize predefined responses for suggestion fields, such as the additional comments field.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    None\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None\n\n\n## Personalize rules \\[personalize\\_rules\\]\n\nPersonalize rules users can personalize business rules and scripts. This role contains additional roles for granting selective, administrative access to rules and scripts.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    -   ui\\_action\\_admin\n    -   business\\_rule\\_admin\n    -   client\\_script\\_admin\n    -   ui\\_policy\\_admin\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    Avoid granting this role to users who don’t need access to all the roles contained in this role.\n\n\n## Personalize styles \\[personalize\\_styles\\]\n\nUsers with the personalize\\_styles role can personalize field styles.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    None\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None\n\n\n## Personalize UI \\[personalize\\_ui\\]\n\nUsers with the personalize\\_ui role can personalize forms and lists.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    -   personalize\\_form\n    -   personalize\\_list\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None\n\n\n## Platform Rest API access \\[snc\\_platform\\_rest\\_api\\_access\\]\n\nAllows access to Platform Rest APIs. This role is contained with in the ITIL \\[itil\\] role.\n\n-   Table API\n-   Import Set API\n-   Aggregate API\n-   Attachment API\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    None\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None\n\n\n## Public \\[public\\]\n\nNo login is required to access features or functions with the public role.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    None\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None\n\n\n## Release administrator \\[release\\_admin\\]\n\nRelease administrators can edit the release history for a release.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    None\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None.\n\n\n## Report administrator \\[report\\_admin\\]\n\nReport administrators can manage, share, publish, and schedule all reports. Users assigned this role can access the **Reports** > **Administration** module and manage all report-related objects. The report\\_admin role inherits all other report roles.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    -   gauge\\_maker\n    -   report\\_alias\\_admin\n    -   report\\_global\n    -   report\\_group\n    -   report\\_publisher\n    -   report\\_scheduler\n    -   viz\\_admin\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None.\n\n\n## Report alias administrator \\[report\\_alias\\_admin\\]\n\nReport alias administrators can maintain field and value aliases.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    None\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None.\n\n\n## Report global \\[report\\_global\\]\n\nReport global users can manage reports that are shared with everyone \\(listed in Global\\).\n\n-   **Contains Roles**\n\n    List of roles contained within the role - report\\_user.\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None\n\n\n## Report group \\[report\\_group\\]\n\nReport group users can manage and share reports that are shared with them \\(listed in Group\\).\n\n-   **Contains Roles**\n\n    List of roles contained within the role - report\\_user.\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None\n\n\n## Report publisher \\[report\\_publisher\\]\n\nReport publisher users can publish reports any that they can manage. Publishing a report creates a public link to that report. Users with this role must also have another role that grants permission to create, edit, and share reports.\n\n-   **Contains Roles**\n\n    List of roles contained within the role - report\\_user.\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None\n\n\n## Report scheduler \\[report\\_scheduler\\]\n\nReport scheduler users can schedule emailing of all reports that they can see, including reports they can’t manage. Users with this role must also have another role that grants permission to create, edit, and share reports.\n\n-   **Contains Roles**\n\n    List of roles contained within the role - report\\_user.\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None\n\n\n## Report user \\[report\\_user\\]\n\nReport users can create and view reports that have been shared with them. Users with this role can't share, edit, or delete reports that have been shared with them.\n\n-   **Contains Roles**\n\n    List of roles contained within the role - viz\\_creator.\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None\n\n\n## Script fix administrator \\[script\\_fix\\_admin\\]\n\nScript fix administrators can manage fix scripts.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    None\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None.\n\n\n## Search application administrator \\[search\\_application\\_admin\\]\n\nSearch application administrators can insert, update, and delete search user experience-related configuration tables:\n\n-   sys\\_search\\_context\\_config\n-   sys\\_search\\_source\n-   m2m\\_search\\_context\\_config\\_search\\_source\n-   sys\\_search\\_facet\n-   sys\\_search\\_filter\n\nSearch application admin is granted the ais\\_admin role to enable AI search configuration.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    -   ais\\_admin\n    -   personalize\\_dictionary\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None.\n\n\n## SOAP \\[soap\\]\n\nusers with the soap role can query, create, update, and delete records on all tables, as well as execute scripts.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    -   soap\\_create\n    -   soap\\_delete\n    -   soap\\_ecc\n    -   soap\\_query\n    -   soap\\_script\n    -   soap\\_update\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None\n\n\n## SOAP create \\[soap\\_create\\]\n\nUsers with the soap\\_create role can create records in all tables and columns.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    None\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None\n\n\n## SOAP delete \\[soap\\_delete\\]\n\nUsers with the soap\\_delete role can delete records in all tables and columns.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    None\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None\n\n\n## SOAP ECC \\[soap\\_ecc\\]\n\nUsers with the soap\\_ecc role can query, create, and update on the external communication channel \\(ECC\\) Queue table only.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    None\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None\n\n\n## SOAP query \\[soap\\_query\\]\n\nUsers with the soap\\_query role can query records on all tables and columns.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    None\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None\n\n\n## SOAP query update \\[soap\\_query\\_update\\]\n\nUsers with the soap\\_query\\_update role can query and update all tables and columns.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    -   soap\\_query\n    -   soap\\_update\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None\n\n\n## SOAP script \\[soap\\_script\\]\n\nUsers with the soap\\_script role can execute business rule endpoint functions via **script.do**.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    None\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None\n\n\n## SOAP update \\[soap\\_update\\]\n\nUsers with the soap\\_update role can update records on all tables and columns.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    None\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None\n\n\n## Survey administrator \\[survey\\_admin\\]\n\nSurvey administrators can see all surveys, definitions, questions, and instances created by them and others. Users with this role can use all modules in the **Survey** application menu.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    -   assessment\\_admin\n    -   sn\\_bm\\_client.benchmark\\_data\\_viewer\n    -   sn\\_publications\\_recipients\\_list\\_user\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None.\n\n\n## Survey creator \\[survey\\_creator\\]\n\nSurvey creators can manage survey definitions, questions, and instances created by them.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    -   sn\\_bm\\_client.benchmark\\_data\\_viewer\n    -   sn\\_publications\\_recipients\\_list\\_user\n-   **Groups**\n\n    List of groups this role is assigned to by default - Survey Creators.\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None\n\n\n## Survey reader \\[survey\\_reader\\]\n\nSurvey readers can view surveys and related information, such as survey responses, survey groups, scorecards, and reports. Users with this role can't change or modify surveys or survey responses.\n\n-   **Contains Roles**\n\n    List of roles contained within the role - sn\\_bm\\_client.benchmark\\_data\\_viewer.\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None\n\n\n## Task editor \\[task\\_editor\\]\n\nTask editors can edit protected task fields.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    None\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None\n\n\n## Template editor \\[template\\_editor\\]\n\nTemplate editors can create templates for personal use, and modify or delete personal templates. This role is included in the itil role in the base system.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    None\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None\n\n\n## Template scheduler \\[template\\_scheduler\\]\n\nTemplate schedulers can schedule template-based record creation.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    None\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None\n\n\n## Text search administrator \\[text\\_search\\_admin\\]\n\nText search administrators can customize Global Text Search groups and tables.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    None\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None.\n\n\n## Timecard administrator \\[timecard\\_admin\\]\n\nTimecard administrators can access all timecard records.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    -   timecard\\_approver\n    -   timecard\\_user\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None.\n\n\n## Timecard approver \\[timecard\\_approver\\]\n\nTimecard approvers approve or reject time cards for users.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    -   pa\\_viewer\n    -   timecard\\_user\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None\n\n\n## Timecard user \\[timecard\\_user\\]\n\nTimecard users can create time cards themselves, and view their own time cards.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    None\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None\n\n\n## User \\[user\\]\n\nThe user role has no functionality and doesn’t grant access to any assets on your instance. Users with this role are counted as licensed fulfillers.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    None\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None\n\n\n## User administrator \\[user\\_admin\\]\n\nUser administrators can administer users, groups, locations, skills, and companies.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    -   fsm\\_skill\\_admin\n    -   skill\\_admin\n    -   territory\\_admin\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None.\n\n\n## View changer \\[view\\_changer\\]\n\nView changers can switch active views.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    None\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None\n\n\n## Workflow administrator \\[workflow\\_admin\\]\n\nWorkflow administrators can create, edit, publish, or delete graphical workflows.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    -   activity\\_creator\n    -   itom\\_admin\n    -   workflow\\_creator\n    -   workflow\\_publisher\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None.\n\n\n## Workflow creator \\[workflow\\_creator\\]\n\nWorkflow creators can create graphical workflows.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    None\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None\n\n\n## Workflow publisher \\[workflow\\_publisher\\]\n\nWorkflow creators can publish graphical workflows.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    None\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None\n\n\n## Workflow report viewer \\[workflow\\_report\\_viewer\\]\n\nWorkflow report viewers can access the workflow scratchpad for reports.\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    None\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None\n\n\n## Zing text search administrator \\[ts\\_admin\\]\n\nUsers with the ts\\_admin role can administer the [Zing text indexing and search engine](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-administration/search-administration/c_ZingTextSearch.md).\n\n-   **Contains Roles**\n\n    List of roles contained within the role.\n\n    None\n\n-   **Groups**\n\n    List of groups this role is assigned to by default.\n\n    None\n\n-   **Elevated**\n\n    Whether the role is an elevated role. Elevated roles aren’t assigned to users or groups, and must be used by elevation. For details, see [Elevated privilege roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/c_ElevatedPrivilege.md).\n\n    No\n\n-   **Special considerations**\n\n    None.\n\n\n-   **[Special administrative roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-administration/user-administration/r_SpecialAdministrativeRoles.md)**  \nCertain roles grant specific administrative rights without the full privileges of the admin role. For example, an administrator can grant a user the right to change UI policy but not client scripts.\n-   **[Read-only role](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-administration/user-administration/c_ReadOnlyRole.md)**  \nThe read-only role \\(snc\\_read\\_only\\) restricts a user or a group of users to read-only access on the tables to which the user already has access.\n-   **[Application specific roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-administration/user-administration/application-specific-roles.md)**  \nApplications you install on your instance may include additional roles. Follow the links in this section to see roles installed along with applications.\n\n**Parent Topic:**[Managing roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-administration/user-administration/ua-creating-roles.md)\n\n"}}