From f77e0bceaa375082cad4f1a4792f333cafd2915a Mon Sep 17 00:00:00 2001 From: Chetna Sharma <146471211+chetnadev@users.noreply.github.com> Date: Mon, 6 Oct 2025 23:16:06 +0530 Subject: [PATCH 1/2] script.js --- .../script.js | 11 +++++++++++ 1 file changed, 11 insertions(+) create mode 100644 Specialized Areas/Fix scripts/Remove Admin Role from All Non-Privileged Users/script.js diff --git a/Specialized Areas/Fix scripts/Remove Admin Role from All Non-Privileged Users/script.js b/Specialized Areas/Fix scripts/Remove Admin Role from All Non-Privileged Users/script.js new file mode 100644 index 0000000000..019545b119 --- /dev/null +++ b/Specialized Areas/Fix scripts/Remove Admin Role from All Non-Privileged Users/script.js @@ -0,0 +1,11 @@ +var adminRoleID = 'INSERT_ADMIN_ROLE_SYS_ID'; +var gr = new GlideRecord('sys_user_has_role'); +gr.addQuery('role', adminRoleID); +gr.query(); + +while (gr.next()) { + var userID = gr.user.sys_id + ''; + if (userID !== gs.getUserID()) { // Keep current user safe + gr.deleteRecord(); + } +} From 0d20b8a330bb72053a19dececb48b849ca9686ce Mon Sep 17 00:00:00 2001 From: Chetna Sharma <146471211+chetnadev@users.noreply.github.com> Date: Mon, 6 Oct 2025 23:19:20 +0530 Subject: [PATCH 2/2] README.md --- .../Remove Admin Role from All Non-Privileged Users/README.md | 4 ++++ 1 file changed, 4 insertions(+) create mode 100644 Specialized Areas/Fix scripts/Remove Admin Role from All Non-Privileged Users/README.md diff --git a/Specialized Areas/Fix scripts/Remove Admin Role from All Non-Privileged Users/README.md b/Specialized Areas/Fix scripts/Remove Admin Role from All Non-Privileged Users/README.md new file mode 100644 index 0000000000..2ac86c6748 --- /dev/null +++ b/Specialized Areas/Fix scripts/Remove Admin Role from All Non-Privileged Users/README.md @@ -0,0 +1,4 @@ +This script is used in ServiceNow to remove the admin role from all users except the one running the script. +It's typically used during a security audit or access cleanup to ensure that only authorized users retain administrative access. +By targeting the sys_user_has_role table and checking for the admin role, it deletes role assignments for all users except the current user, helping reduce the risk of +unauthorized changes or privilege misuse in the system.