Which role is required to create a risk assessment methodology (RAM)?

• A. sn_risk.user
• B. sn_risk.admin
• C. sn_risk.manager
• D. sn_compliance.admin

Answer: (B)

Creating a risk assessment methodology requires admin-level access in the Risk Management portion of ServiceNow. The sn_risk.admin role provides the full permissions needed to define and modify risk assessment methodologies, including scoring models, thresholds, and how risks are evaluated. A user with sn_risk.user typically can view or work with risk items but cannot create or change RAM definitions. The sn_risk.manager role usually supports oversight and workflow actions on risks rather than core configuration of RAMs. The sn_compliance.admin role is tied to the Compliance app, not to Risk Management methodologies. So the best answer is the risk admin role because only that level of access lets you create and configure RAMs.