Before any changes to the configuration of an application are made, it is recommended that the correct update set and application scope are selected…

The System Administrator (admin) role is required for managing fundamental platform configurations. This includes creating, modifying, and selecting update sets, which are used to move customizations between instances. It also includes the ability to switch the application scope, ensuring that any configuration changes are correctly associated with the intended application, such as Vendor Risk Management. These are system-level functions that fall outside the scope of application-specific or user-management roles.

A. The Vendor Administrator role is specific to the VRM application and manages vendor data and assessments, not platform-level configurations.

B. The Data Administrator is not a standard, out-of-the-box ServiceNow role; its permissions would be custom and are not guaranteed.

C. The User Administrator role is focused on managing users, groups, and roles, and lacks the permissions to alter system configurations like update sets.

---

1. ServiceNow Product Documentation - Base system roles: The admin (System Administrator) role is described as having access to all system features, functions, and data. This inherently includes the ability to manage update sets and application scopes.

Reference: ServiceNow Product Documentation, Quebec Release, "Base system roles," section for "System administrator (admin)".

2. ServiceNow Product Documentation - Update Sets: The documentation explicitly states that administrative rights are required for managing update sets.

Reference: ServiceNow Product Documentation, Washington DC Release, "Update sets," section "Create an update set." The procedure notes that the admin role is required.

3. ServiceNow Product Documentation - Application Scope: The documentation on application scoping confirms that the admin role is necessary to switch between scopes.

Reference: ServiceNow Product Documentation, Washington DC Release, "Application scope," section "Select an application scope." It states, "To select an application scope, you must have the admin role or the delegateddeveloper role for that scope."