---
sourceDocument: Australia Security Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/security-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Security Exposure Management Workspace Roles

# Security Exposure Management Workspace Roles {#ariaid-title1}

* Release version: Australia
* 
* Updated March 12, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

List of roles installed with Security Exposure Management, defining user permissions and access for Security Exposure Management-related tasks.
{#sem-new-roles-installed__table_tvj_fyc_hgc__entry__4}

| Application | Role title | Description | Contains roles |
|-|-|-|-|
| Vulnerability Response Common | sn_vul_cmn.usem_admin | Configures rules, integrations, and related settings for Vulnerability Response, Application Vulnerability Response, Container Vulnerability Response, and Configuration Compliance. | * sn_vul.vulnerability_admin * sn_vul.app_sec_manager * sn_vul_container.vulnerability_admin * sn_vulc.admin {#sem-new-roles-installed__ul_arc_nbd_hgc} |
| Administration for Security Exposure Management | sn_sec_wf.read_admin_rules | Read access to administration rules. | * sn_sec_calculator.read * sn_vul_cmn_ws.read_admin_rules * sn_vul_cmn.read_auto_close_rules {#sem-new-roles-installed__ul_okv_sbd_hgc} |
| Administration for Security Exposure Management | sn_sec_wf.manage_admin_rules | Create, read, update, and delete administration rules. | * sn_vul_cmn.manage_auto_close_rules * sn_sec_wf.read_admin_rules * sn_vul_cmn_ws.write_admin_rules * sn_sec_calculator.admin {#sem-new-roles-installed__ul_jgv_1cd_hgc} |
| Exception Management for Unified Security Exposure Management | sn_sec_exception.approver | Approve or reject exception requests, false positive requests, and exception rules. | sn_sec_exception.read |
| Exception Management for Unified Security Exposure Management | sn_sec_exception.read | Read access to exception management configuration and exception rules. | None. |
| Exception Management for Unified Security Exposure Management | sn_sec_exception.admin | Create, read, update, and delete exception management configuration and exception rules. | sn_sec_exception.read |
| Risk Scoring for Security Exposure Management | sn_sec_calculator.read | Read access to records in the `sn_sec_calculator` scope. | None. |
| Risk Scoring for Security Exposure Management | sn_sec_calculator.admin | Create, read, update, and delete records in the `sn_sec_calculator` scope. | sn_sec_calculator.read |
[ ]

{#sem-new-roles-installed__table_tvj_fyc_hgc}