---
sourceDocument: Australia Security Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/security-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Major Security Incident Management roles

# Major Security Incident Management roles {#ariaid-title1}

* Release version: Australia
* 
* Updated March 12, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

Assign roles to ensure that users can perform all necessary actions within the MSIM application.
{#msi-roles__table_fpp_lfc_crb__entry__3}

| Role Type | Role | Description |
|-|-|-|
| MSI Administrator | sn_msi.workspace_admin | Can I install and configure Major Incident Management and set up the dependent applications such as File Explorer (FE), Microsoft Teams and Chat Channel configuration, Workspace setup, and MSI Administration: Configurations and Notifications setup. How to set up: * File Explorer (FE) component: * Configure file repository. * Configure file and folder actions, which are provided on the File Explorer component of the Collaboration tab in the Major Security Incident Management workspace. * Create the root folders and subfolders, and provide access to the subfolders. {#msi-roles__ul_l15_gqq_cqb} * Chat channel management * Activate and configure Microsoft Teams by validating Microsoft Teams connection. * Create chat teams and chat channels, and add users and assign users to the various user groups. {#msi-roles__ul_htf_rqq_cqb} * MSI Administration: * Configurations: Configure the security analysts actions, notifications sent when incidents are proposed and promoted, and display tags for the security incidents. * Notifications: Automate email notification process and user notifications when a security incident is either proposed or promoted as a major security incident. {#msi-roles__ul_ajc_51v_35b} {#msi-roles__ul_jvj_fqq_cqb} |
| MSI Manager | sn_msi.workspace_manager | * View access to the major security incident management configuration settings page. Restricted from modifying any of the configuration settings. * View and edit incident record data in the Details, Collaboration, and Task Organizer tabs of the Major Incident Management workspace. * Promote the security incident to a major security incident. * Configure file and folders actions available on the File Explorer component on the Collaboration tab of the Major Incident Management workspace. * Linking and unlinking additional records to Major Security Incidents from the workspace. {#msi-roles__ul_otm_lrq_cqb} |
| MSI Responder | sn_msi.workspace_responder | * Optional role to view, edit, and respond to major security incidents in the Details and Tasks tabs of the Major Incident Management workspace. * Linking and unlinking additional records to Major Security Incidents from the workspace. {#msi-roles__ul_jhh_5rq_cqb} |
[Table 1. Roles for Major Incident Management]

{#msi-roles__table_fpp_lfc_crb}
**Related concepts**   

* [Major Security Incident Management](https://servicenow-prod.fluidtopics.net/EtbSd8jJZ3AedyfkkbQRqA "Track and manage various activities that are typically part of resolving a major security incident through Major Security Incident Management. Through an intuitive workspace, incident managers and those working on an incident can propose and promote incidents to major incidents, track major security incident activities, and easily collaborate with colleagues.")  
**Related reference**   

* [Get started with MSIM](https://servicenow-prod.fluidtopics.net/7vXPafzH3keuDnwsZHvFSg "Review the following information before you start working with Major Security Incident Management.")
* [Checklist for MSIM setup](https://servicenow-prod.fluidtopics.net/~RRxSBcWML8JrPJh1EEPGA "Before using the ServiceNow Major Security Incident Management (MSIM) application, download the application from the ServiceNow Store.")
* [Environment reference for MSIM setup](https://servicenow-prod.fluidtopics.net/PXYEyKM0Fb2TJS9qXdq02Q "Use this reference table to track environment-specific values while you set up Major Security Incident Management. Complete one column per environment.")