--- title: Assign roles for CMDB success advisor users description: Assign roles to control access to features, capabilities, and data in the CMDB success advisor application. locale: en-US canonical_url: https://www.servicenow.com/docs/r/australia/servicenow-platform/configuration-management-database-cmdb/cmdb-sa-assign-roles.html release: australia product: Configuration Management Database \(CMDB\) classification: configuration-management-database-cmdb topic_type: task last_updated: "2026-07-22" reading_time_minutes: 2 keywords: [assign CMDB success advisor roles, CMDB success advisor role requirements, sn\_cmdb\_admin sn\_cmdb\_user roles, scope\_user scope\_editor roles] breadcrumb: [Configure, CMDB success advisor, Configuration Management Database \(CMDB\), Configuration Management, Extend ServiceNow AI Platform capabilities] --- # Assign roles for CMDB success advisor users Assign roles to control access to features, capabilities, and data in the CMDB success advisor application. ## Before you begin Set the application scope to CMDB success advisor using the application picker. For more information, see [Application picker](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/application-development/c_ApplicationPicker.md). Role required: admin ## About this task Users with the following combination of roles can use the CMDB success advisor application.
| Role | Description | Applies to |
|---|---|---|
| sn\_cmdb\_admin | Required to access the CMDB success advisor. Users with the sn\_cmdb\_admin role can configure and improve CMDB data accuracy based on specific business use cases. | Data Foundations, HAM, and SAM dashboards |
| sn\_cmdb\_user | Provides read-only access to CMDB success advisor from the Insights section in Service Graph Workspace. Users with this role can view the Dashboard tab only. Users with this role can't access the Settings and Integrations tabs. | Data Foundations, HAM, and SAM dashboards |
| sn\_cmdb\_editor | Provides read-only access to CMDB success advisor from the Insights section in Service Graph Workspace. Users with this role can view the Dashboard tab only. Users with this role can't access the Settings and Integrations tabs. | Data Foundations, HAM, and SAM dashboards |
| sn\_cmdb\_advisor.scope\_user | Provides read-only access to CMDB success advisor pages and data, including the AI-generated summary and remediation actions on the HAM dashboard.**Note:** Also, requires the sn\_cmdb\_user role. | Data Foundations, HAM, and SAM dashboards |
| sn\_cmdb\_advisor.scope\_editor | Required to edit dashboard scope and content template settings for SAM. The sn\_cmdb\_advisor.scope\_editor role contains the sn\_cmdb\_advisor.scope\_user role.**Note:** Also, requires the sn\_cmdb\_user role. For Data Foundations and HAM dashboards, editing scope requires the sn\_cmdb\_admin role. The scope\_editor role doesn't grant scope edit access for these products. | SAM dashboard |
| sam\_user | Required to view the SAM advisor dashboard in read-only mode. | SAM dashboard |
| sam\_admin | Required to select or edit the software products in the SAM advisor scope. | SAM dashboard |
| cmdb\_inst\_admin | Required to manage Service Graph Connector connections in SGC Central through CMDB success advisor.**Note:** Service Graph Connector data can be read without any additional role. The cmdb\_inst\_admin role is required for creating or modifying connector configurations through CMDB success advisor. | Data Foundations and HAM dashboards |
| pd\_user | Required to view Discovery and Service Mapping Patterns through CMDB success advisor with read-only access. | Data Foundations and HAM dashboards |
| pd\_admin | Required to manage Discovery patterns with create and write access. | Data Foundations and HAM dashboards |