> ## Knowledge Base Index
> Fetch the complete knowledge base index at: https://help.configbot.ai/sitemap.xml
> Use this file to discover available pages before exploring further.
> Pure-Markdown content can be obtained by appending a '.md' suffix to the content URLs listed in the sitemap (without the trailing slash).

# ConfigBot for ServiceNow – Impact Analysis Security: Overprovisioned Users

Sometimes, high-level roles such as **admin** or **security_admin** are assigned to users who may not actually need them. Identifying these *over-provisioned* roles typically requires manually reviewing each record — a time-consuming and error-prone process. 
With **ConfigBot’s Impact Analysis Security** module, administrators can quickly identify users who hold critical or excessive roles, helping ensure proper access control and compliance. 
The following article explains how to generate analysis and see Overprovisioned users in the instance using configbot 

**Step 1: Log in to ConfigBot** 

Enter your **username** and **password**, then click **Submit** to access the portal. 

 ![](https://storage.crisp.chat/users/helpdesk/website/-/4/3/b/7/43b7e9fbd033000/image_ngkw53.png)

**Step 2: Access the Impact Analysis Security Module**
 
From the **Home Screen**, click on the **Impact Analysis Security** module tile. 

 ![](https://storage.crisp.chat/users/helpdesk/website/-/4/3/b/7/43b7e9fbd033000/image_r3olkl.png)

**Step 3: Select a Workspace** 

Choose the workspace that best fits your analysis needs. 

 ![](https://storage.crisp.chat/users/helpdesk/website/-/4/3/b/7/43b7e9fbd033000/image_1q36x1b.png)

**Step 4: Create a New Iteration** 

Click the **Add Iteration** button 

 ![](https://storage.crisp.chat/users/helpdesk/website/-/4/3/b/7/43b7e9fbd033000/image_15alde0.png)

* Enter the **Iteration Number** 
* Select the **Workspace** 
* Enter **Host Address** 
* Choose the **Instance Type** 
* Enter your **Company ID** and **Username** 
* Add a short **Description**  
* Then click **Submit** to create the iteration. 

 ![](https://storage.crisp.chat/users/helpdesk/website/-/4/3/b/7/43b7e9fbd033000/image_se32mj.png)

 
**Step 5: Open the Workbook** 

Navigate to your newly created iteration (for example, *Iteration #1*) and open the **Workbook**. 
 It will open in a new browser tab. 

![](https://storage.crisp.chat/users/helpdesk/website/-/4/3/b/7/43b7e9fbd033000/image_1syfs94.png)

**Step 6: Configure the Role Filter (Optional)** 

Within the workbook: 
* Go to the **Config** worksheet tab. 
* In the Fetch Over Provisioned Users Filter Type column, select **Fetch only**. 
* In the Role Names column, specify the role name (e.g., admin, sn_hr_core.admin). 
 
 Then close the workbook once configuration is complete. 

**Step 7: Generate Workbook** 

Click the **Hamburger Menu** and select **Generate Workbook**. 
 
 ![](https://storage.crisp.chat/users/helpdesk/website/-/4/3/b/7/43b7e9fbd033000/image_1wu9qfb.png)

 
In the pop-up window: 

* Enter your **ServiceNow instance password** 
* Add any **execution notes** 
* Select the checkbox for **Overprovisioned Users** 
Then click **Confirm and Start** to begin the analysis. 

![](https://storage.crisp.chat/users/helpdesk/website/-/4/3/b/7/43b7e9fbd033000/image_k0lr6p.png)

**Step 8: Monitor Progress** 

Click the **Information (ℹ️) icon** to track your iteration’s progress. 

 ![](https://storage.crisp.chat/users/helpdesk/website/-/4/3/b/7/43b7e9fbd033000/image_8xxb9l.png)

**Step 9: Review Results** 

Once the status shows **Complete**, open the generated workbook. 
 ![](https://storage.crisp.chat/users/helpdesk/website/-/4/3/b/7/43b7e9fbd033000/image_1cim8m1.png)
Navigate to the **Overprovisioned Users** sheet to view all users who have been assigned high-level or unnecessary roles. 

![](https://storage.crisp.chat/users/helpdesk/website/-/4/3/b/7/43b7e9fbd033000/image_1gw3v7b.png)

Using **ConfigBot’s Impact Analysis Security – Overprovisioned Users** feature, administrators can quickly detect and review accounts with excessive privileges. This proactive analysis helps:
 
* Prevent unauthorized system access 
* Improve compliance with security policies 
* Streamline access management by removing redundant role assignments 

Thank you!