What is the minimum role required to approve a Policy?

• A. sn_grc admin
• B. sn_compliance manager
• C. sn_compliance user
• D. sn_grc user

Answer: (C)

This question tests role-based access control for policy approvals in ServiceNow IRM. Approving a Policy requires a user to have the permissions that allow participation in compliance decisions, but not necessarily broader admin or managerial powers. The smallest role that provides the ability to approve is sn_compliance_user. This role is designed for individuals who handle compliance tasks and perform approvals without granting elevated rights.

The other roles include broader or different privileges: sn_grc_admin is an administrator with extensive access, sn_compliance_manager has higher-level management permissions, and sn_grc_user is a basic user without approval rights. Therefore, the minimum required to approve a policy is sn_compliance_user.