---
sourceDocument: Australia ServiceNow AI Platform Capabilities
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/de-DE/servicenow-platform

 Release :

    - australia

ft:locale :

    - de-DE

ft:publication_title :

    - Australia ServiceNow AI Platform Capabilities

ft:clusterId :

    - platcap

bundleId :

    - platcap

workflow :

    - Platform


---

# Control user access to application services

# Control user access to application services {#ariaid-title1}

* Freigeben Version: Australia
* 
* Aktualisiert 12. März 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 3 Minuten Lesedauer

Assign user roles to service groups to grant users access to application services in
your organization. Your organization may restrict access to some services for security or
secrecy reasons.

## Vorbereitungen

Make sure that you have performed the user provisioning tasks for the users you want to grant access:

1. [Add users to user
   groups](https://www.servicenow.com/docs/access?context=t_CreateAGroup&version=australia&pubname=australia-platform-administration&ft:locale=en-US).
2. [Create new
   roles](https://www.servicenow.com/docs/access?context=t_CreateARole&version=australia&pubname=australia-platform-administration&ft:locale=en-US).
3. [Assign roles to
   users or user groups](https://www.servicenow.com/docs/access?context=t_AssignRoleToGroup&version=australia&pubname=australia-platform-administration&ft:locale=en-US).
{#control-user-access-to-business-services__ol_ind_24r_dcb}

Also, make sure that you have created service groups as described in [Group application services](https://servicenow-prod.fluidtopics.net/4YnAbIXZUn30PS9sTfkUTA "Organize application services by groups to perform actions simultaneously on multiple services, and to control user access to services. You can use Event Management to track service health by service groups.").

Role required: app_service_admin or service_mapping_admin

## Warum und wann dieser Vorgang ausgeführt wird

In the base system, the following roles provide access to application services:

app_service_admin

:   Creates
    and modifies service instances, creates service groups, views, and edits service instance maps.

app_service_user

:   Views
    maps for operational service instances and retrieves service content using the getContent - GET REST API. The itil role that serves as the basic helpdesk technician role contains the app_service_user role.

Service Mapping provides these preconfigured roles:

service_mapping_admin

:   Sets up the Service Mapping application. Maps, fixes, and maintains service instances. Also performs advanced configuration and customization of the product. Assign this role to application administrators.

service_mapping_user

:   Views maps for operational service instances to plan change or migration, as well as analyze the continuity and availability of services. Assign this role to application users.

sm_app_owner

:   Provides information necessary for successful mapping of a service instance. Once a service is mapped, this user reviews the results and either approves it or suggests changes. Assign the
    sm_app_owner role to users who own service instances and are familiar with the infrastructure and applications that make up the services.

Hinweis:  
Users with the sn_cmdb_editor or itil role only can view all service instances.

Event Management provides these
preconfigured roles:

evt_mgmt_admin
:   Has read and write access to all Event Management features to configure Event Management.

evt_mgmt_operator
:   In addition to the evt_mgmt_user permissions, can also activate operations on alerts such as acknowledge, close, open incident, and run remediations.

evt_mgmt_user
:   Has read access to all Event Management features. Has write access to alerts to manage the alert life. Has the itil role to be able to manage incidents that are created from alerts.

evt_mgmt_integration
:   Has create access to the Event \[em_event\] and Registered Nodes \[em_registered_nodes\] tables to integrate with external event sources.

Typically, enterprises have hundreds of services which makes it impractical to manage them individually. Service groups can make service lists much shorter and easier to manage, especially in large organizations or service providers.
In a hierarchy of service groups, access to a parent service group automatically
grants access to all the child service groups.  
Users inherit permissions from roles that are assigned to them. You can assign some roles directly to service groups to allow all users with this role to access all application services belonging to this group. However, most enterprises choose to organize their roles as a hierarchy. It helps to manage roles across multiple ServiceNow applications. For example, the Service Mapping administrator \[service_mapping_admin\] can be part of a broader administrator role like administrator \[admin\]. You can add users to user groups and then assign roles to the user groups to give permissions of this role simultaneously to all the group users.Abbildung : 1. Assigning a role to an application service group   

By default, all new services are assigned to the All service group that lets all users view and manage service instances. When you assign a role to a service group, the users with this role can access service instances in this service group and in the All service group. To enable users with this role to access other services, assign this role to the respective service group. Do not assign user roles directly to the All service group.

## Prozedur

1. Navigate to either of the following:  
   * ConfigurationApplication ServicesService Group Responsibilities.
   * If Service Mapping is activated: Service MappingServicesService Group Responsibilities.
   * If Event Management is activated: Event ManagementServicesService Group Responsibilities.
   {#control-user-access-to-business-services__ul_pzk_jr3_ndb}
2. Click New and fill out the Application Service Group Responsibilities form.  
   {#control-user-access-to-business-services__table_kgf_xpc_12b__entry__2}

   | Field | Description |
   |-|-|
   | Application Service Group | Service group to which you want to assign a role. |
   | Role | Role you want to assign to the selected service group. For example, financial_services_admin. |
   [ ]

   {#control-user-access-to-business-services__table_kgf_xpc_12b}
3. Click Submit.

## Beispiel

To manage access to services that contain sensitive financial information in your organization:

1. Organize the services into the Financial Services group.
2. Create a new user role, financial services administrator \[financial_services_admin\] role, that contains the \[app_service_admin\] role.
3. Assign the Financial Services administrator role to the Financial Services group.
{#control-user-access-to-business-services__ol_u5r_lmg_5db}As a result, only users with the Financial Services administrator role can access application services belonging to the Financial Services group.