> For the complete documentation index, see [llms.txt](https://help.security.gallagher.com/command-centre/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://help.security.gallagher.com/command-centre/accessnow-user-guide/system-administration/system-administration-groups/roles-and-privileges.md).

# Roles & Privileges

Roles are used to assign privileges to a system management group.

## Preconfigured System Roles

The system comes with some roles already preconfigured. The following roles are provided for setting up the system.

Note that only highly privileged individuals should use these roles for the initial setup.

<table data-header-hidden><thead><tr><th width="160">Role Name</th><th>Privileges Description</th></tr></thead><tbody><tr><td><strong>System Administrator</strong></td><td>This role grants access to all system configuration and management functions. It's intended for initial system setup.<br><strong>Carefully consider who receives this access.</strong></td></tr><tr><td><strong>Workflow Manager</strong></td><td>The role allows for system workflow configuration and management. It's intended for people who set up the system workflows. It allows, e.g. to manage workflow drop-down lists, Access Groups list, configure email templates, etc.</td></tr></tbody></table>

## System Administrative Privileges

Privileges are assigned to roles. They control what users can see and what actions they can take.

Privileges are set at the product level and cannot be changed.

<table data-header-hidden><thead><tr><th width="213.233154296875">Privilege Name</th><th>Description</th></tr></thead><tbody><tr><td>ListImportItems</td><td>Imports access groups from Command Centre as list items in AccessNow.</td></tr><tr><td>ListSyncItems</td><td>Syncs access group changes from Command Centre, including added, deleted, and updated access groups.</td></tr><tr><td>ManageEmailTemplates</td><td>Manages email templates. The Template Reference ID is used in workflows.</td></tr><tr><td>ManageGroup</td><td><p>User groups are used in the system to enable privilege and approver management.</p><p>There are two main types of groups: Approver Groups and System Management Groups.</p></td></tr><tr><td>ManageGroupRoles</td><td>This privilege is not currently working.</td></tr><tr><td>ManageGroupUsers</td><td>This privilege is not currently working.</td></tr><tr><td>ManageList</td><td>Manages lists. Lists are used to manage items such as access area lists and to assign approver groups to an access zone.</td></tr><tr><td>ManageRole</td><td>Manages roles.</td></tr><tr><td>ManageSettings</td><td>Lists are used to manage Access Groups and the drop-down and search lists used in workflows. This privilege is also required to assign approver groups to an Access Group.</td></tr><tr><td>ManageUser</td><td>Creates and deletes users.</td></tr><tr><td>ManageWorkflow</td><td>Manages and edits workflows. Grants the user access to all Workflow Management and Workflow Builder features.</td></tr><tr><td>TestWorkflow</td><td>Allows users to test all workflows in testing mode.</td></tr><tr><td>ViewRequestLogs</td><td>Views user activity, requests, approval history, and groups.</td></tr></tbody></table>

## Creating New Roles

To **create** new roles, go to the system **Roles** module and use the **+Create Role** button.

To **edit** an existing role, click on the role record.

To **delete** a role, use the **Bin** button.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://help.security.gallagher.com/command-centre/accessnow-user-guide/system-administration/system-administration-groups/roles-and-privileges.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.