Which role provides access to sensitive information, including SSNs and paychecks?

The role that provides access to sensitive information, including Social Security Numbers (SSNs) and paychecks, is specifically tailored for managing confidential data within the HR module of ServiceNow. The designation of sn_hr_core.secure_info_reader is designed for users who need to read sensitive HR information without having the ability to modify it. This ensures that while access to critical data is granted, it is done in a controlled and secure manner.

Other roles, such as the HR admin, generally have broader administrative rights but might not have restrictions in place that prevent data modifications or abuse of sensitive information. The sn_hr_migration.admin role is focused on data migration tasks and is not intended for regular access to sensitive information, while sn_hr_core.basic is typically meant for general users with limited capabilities and access to HR information, far less sensitive than what secure_info_reader covers. This makes the selected role paramount for safeguarding sensitive HR data while still permitting necessary access.