---
title: Operation-level security for models
description: Control access to model operations with user roles and groups.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/integrate-applications/erp-integration-framework/erp-canvas-set-operation-level-security-on-a-model.html
release: australia
product: ERP Integration Framework
classification: erp-integration-framework
topic_type: concept
last_updated: "2026-08-05"
reading_time_minutes: 1
keywords: [erp, canvas, erp canvas, model, security, operation, model security, integration, data hub, zero, copy, connector, sap]
breadcrumb: [ERP model operations, Using, Zero Copy Connector for ERP, Workflow Data Fabric]
---

# Operation-level security for models

Control access to model operations with user roles and groups.

## Model operation security

You must have the sn\_erp\_integration.erp\_admin role to create and edit models.

In Zero Copy Connector for ERP, new permission rules for model operations require you to have a specified role or be part of a specified user group to execute model operations. Each model operation must have at least one user role or one user group specified. You can add multiple user roles and groups as needed.

On a single model, different operations can have different permissions. For example, a financial data model can have some users with only read access to review data, but they can't update or create a financial record. For that same model, you can give other users or groups access to update and create financial records.

\[Omitted image "erp-operation-security1.png"\] Alt text: Manage model page with create, read, and update operations that have user or group roles assigned for security.

## Security of existing operations

To help prevent disruptions, all existing model operations have been assigned the admin role and the erp\_user role by default.

You can edit these permissions on the existing operations at any time to suit your needs. To change the permissions, select the edit \(pencil\) icon \[Omitted image "pencil-outline-24.svg"\] Alt text: on the model operation card.

\[Omitted image "erp-operation-security2.png"\] Alt text: Manage model page with create, read, and update operations that have the admin and erp\_user role assigned.

## Additional resources

To learn more about adding an operation, see [Add an operation to a model in Zero Copy Connector for ERP](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/integrate-applications/erp-integration-framework/erpc-manage-models-read-op.md).

To clone a model, you must have permissions to access the model operations. For more information, see [Clone an ERP model in Zero Copy Connector for ERP](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/integrate-applications/erp-integration-framework/erp-canvas-clone-data-model.md).