ServiceNow Roles, Permissions and Privileged Access Review (Defensive)
Check who can change records and configuration.
The Open buttons send the prompt text as currently shown below to that site only when you click. Fill in the placeholders first.
[VERIFY] is an editorial flag, not a blank to fill. Wherever the prompt shows [VERIFY], check that item against a reliable source before you use it.
Review access in our ServiceNow instance as a defensive review of my own instance, recommending least privilege and review, not workarounds. Users with roles, especially administrators and roles that can modify workflows or data: [ROLE_ASSIGNMENTS]. Service accounts and integrations: [INTEGRATIONS]. Our policy: [POLICY]. List the highest-risk roles (the ability to change workflows, edit any record or manage users) and the number of people holding each. Check for too many administrators, users with roles they no longer need, shared accounts, former staff, integrations with broad access, and lack of review. For every finding give the realistic consequence, such as an unreviewed change to a workflow affecting every request, and the smallest fix, rated by risk and effort. Propose role groups by job, a request and approval process for privileged access, time-limited elevation where possible [VERIFY], logged reviews, a leaver checklist, and a quarterly recertification in which managers confirm staff still need the access. Base findings on the list and name who approves changes. Do not ask me for credentials. Terminology and options depend on the version and on local customisation, so mark unconfirmed items [VERIFY] before I rely on them.
Fill in before use
Optional: type your details and the prompt above updates. Nothing is saved or sent.
Replace each bracketed placeholder with your own details, then paste into Any AI or another assistant.