In ServiceNow, Roles are used to configure access to Applications and Modules. Roles are a core component of ServiceNow ' s role-based access control model and determine which application menus, modules, features, and administrative capabilities a user can access.
For an Application , access can be restricted by assigning one or more roles to the corresponding Application Menu record. Only users possessing the required role can normally see that application in the navigation interface. ServiceNow documentation states that application access can be configured through the application ' s User role or through the Roles field on the Application Menu.
Modules are controlled similarly. The Module record contains a Roles field within its Visibility configuration. ServiceNow specifies that access to modules in the navigation menu is controlled through roles; users must meet the applicable role requirements before the module is displayed.
Users and Groups can receive roles, but they are not the permission mechanism configured directly on Applications and Modules. Departments are organizational records and do not determine Application Navigator access.
Therefore, the permission mechanism used to configure Application and Module access is Roles .
Study Guide Reference/Topics: User Administration → Roles → Role-Based Access → Application Menus → Module Visibility → Assigning Roles to Users and Groups.
