What minimum role is needed to bulk initiate risk assessments using the risk assessment scheduler?

The snrisk.manager role is the minimum required role to create, modify, and manage scheduled jobs for initiating risk assessments in bulk. This role provides access to the "Risk Assessment Scheduler" module. While the snrisk.admin role also has these permissions, it possesses broader administrative capabilities, making snrisk.manager the minimum role specifically for this management task. Users with this role can define the frequency, timing, and scope of assessments to be generated automatically, streamlining the risk management process.

A. sngrc.businessuser: This role is for end-users who interact with GRC applications at a basic level, such as viewing assigned tasks, but cannot configure schedulers.
B. snrisk.user: This role is primarily for individuals who respond to risk assessments and manage risks or controls assigned to them, not for scheduling assessments.
C. snrisk.admin: This role can perform the action, but it is not the minimum role required; it has higher-level administrative privileges than necessary for this specific task.

1. ServiceNow Product Documentation. (2024). Roles in Risk Management. ServiceNow. Retrieved from the official product documentation site. The documentation specifies that the snrisk.manager role is required to access the Risk Assessment Scheduler module (Risk > Administration > Risk Assessment Scheduler).

2. ServiceNow Product Documentation. (2024). Create a risk assessment methodology (RAM). ServiceNow. In the "Before you begin" section for related tasks like creating schedulers, the snrisk.manager role is explicitly mentioned as a prerequisite.