Skip to content

Roles

Users can be granted any of the given personas on Hire2Retire IGA application on ServiceNow. It is recommended to create Hire2Retire Integration Admin as a service user in ServiceNow. Following are the user personas.

Persona Roles
Hire2Retire IGA Integration Admin
This user will be used for connecting Hire2Retire to Hire2Retire IGA on ServiceNow.
x_srbtd_h2r.hire2retire_integration_admin - Write to and read from custom Hire2Retire IGA Tables on ServiceNow
catalog_admin - Access to Service Catalog modules in the application navigator
credential_admin - To create API key used by Hire2Retire IGA to make API requests to Hire2Retire.
import_transformer - Allows users to run and manage transform maps to import and update data automatically in ServiceNow.
ACL Required - This user requires a specific Read ACL for the sys_user table. (Follow the steps below to create the ACL.)
Hire2Retire IGA Admin
This user has full access to all Hire2Retire IGA pages and settings, with permissions to manage all events.
x_srbtd_h2r.hire2retire_admin - This persona allow user access to all Hire2Retire IGA pages
itil - Provides basic IT service management permissions
credential_admin - To use API key for Hire2Retire IGA to make API requests to Hire2Retire.
Hire2Retire IGA Reviewer
This user will be for managers or reviewers to view and act on events, approve or reject requests.
x_srbtd_h2r.hire2retire_reviewer - This persona allow user to review pending event on Hire2Retire IGA
itil - Provides basic IT service management permissions
credential_admin - To use API key for Hire2Retire IGA to make API requests to Hire2Retire.
Hire2Retire IGA Viewer
This persona can view events at observe page.
x_srbtd_h2r.hire2retire_viewer - This role allow user to view event data

Creating a Read ACL for the sys_user Table

To allow the Hire2Retire IGA Integration Admin user to read fields from the sys_user table, you must create a Read Access Control (ACL) on that table. Follow these steps:

Steps to Create Read ACL on sys_user Table

  1. To create ACL, go to Navigation bar and search for Access Control (ACL).

    Access Control

    Figure 1. Access Control in ServiceNow

  2. On top right corner, Click on New

    User Table Access Control

    Figure 2. Create user table ACL

    Note: If the New button is not visible, you need to elevate the role to security_admin. You can do this by using the Elevate Role option in the account profile section. Elevate Role

    Figure 3. Elevate user role to Security Admin

  3. After filling the following details , Click on Submit

    • Type: record
    • Operation:read
    • Name: Select the Import Set Web Service that you created in above steps. eg. User [sys_user]
    • Fields: Select * to apply the ACL to all fields
    • Role: x_srbtd_h2r.hire2retire_integration_admin

    New ACL creation

    Figure 4. New ACL creation fields