Only users with which role, at a minimum, may view the confidential data on the HR Profiles table?

In ServiceNow HR Service Delivery, the HR Profile table (snhrcore.profile) contains confidential employee data. Access to this table follows the principle of least privilege. The Profile Writer role [snhrcore.profilewriter] is the minimum role required to view confidential data on HR Profiles. This role inherently includes read permissions along with write capabilities. The Profile Reader role has restricted access and cannot view fields marked as confidential, while HR Case roles are specifically scoped to case management functionality and do not grant access to HR Profile confidential data.

B. Profile Reader role has read-only access but excludes confidential fields by design.
C. HR Case Writer role is limited to case management objects, not HR Profile data.
D. HR Case Reader role only provides read access to HR cases, not employee profiles.

1. ServiceNow HR Service Delivery Implementation Guide

Version San Diego

Section 4.3 "HR Profile Security Model"

pp. 87-89

2. ServiceNow Role-Based Access Control Documentation

HR Core Application Roles

Document ID: KB0010234

Paragraphs 12-15

3. ServiceNow Certified Implementation Specialist - HR Official Study Guide

Chapter 7 "Data Security and Access Controls"

pp. 145-147