Module End-User Playbooks — كل الأدوار بكل الموديولات
Platform target: ServiceNow Australia (Sep 2026) · next EA: Brazil
URLs: ../../SERVICENOW_DIRECT_URLS_CATALOG.html · 1-week: ../../SERVICENOW_ONE_WEEK_STUDY_DEPLOY_AUSTRALIA.html
HR Leave: Scope x_786686_hr_leave
دلائل المستخدم النهائي عبر جميع الموديولات
Single reference for every persona across every module — what they do in a day, where they click, what scripts power their work.
مرجع موحّد لكل شخصية في كل موديول — ما هي مهامها اليومية ومن أين تعمل.
§1 — How to use this document / كيفية الاستخدام
| Reader | Action |
|---|---|
| Trainer | Use the persona tables as session outlines |
| End user | Read your role’s “Day in Life” + “Top 5 actions” |
| Consultant | Use the role catalog when scoping personas in Phase 1-2 |
| Hiring manager | Use as job description seed |
Each module file has a deep §17 — Power User Playbook with full scripts. This file is the cross-module index + quick reference.
§2 — Universal personas / الأدوار الشاملة (cross-module)
| Persona | Primary modules | Workspace |
|---|---|---|
| Employee | HRSD, ITSM Catalog, CSM portal | /esc, /sp |
| Manager (any line) | HRSD, ITSM (approvals), SPM | /now/…, mobile |
| IT Service Desk | ITSM | /now/sow/home |
| HR Agent | HRSD | /now/hrx/home |
| CSR (Customer) | CSM | /now/cwf/agent |
| Field Technician | FSM | Now Mobile |
| Dispatcher | FSM | /now/fsm/dispatcher |
| Risk / Control Owner | GRC | EC + GRC Workspace |
| SOC Analyst | SecOps | /now/sir/agent |
| Vulnerability Owner | SecOps VR | VR workspace |
| Developer (Pro) | App Engine, DevOps | Studio + AES |
| Citizen Developer | App Engine | AES |
| Project Manager | SPM | Planning Console |
| Resource Manager | SPM | /now/rm |
| Executive | All (dashboards) | UI Builder dashboards |
| Auditor (internal/external) | GRC | Auditor workspace |
| Asset Manager | ITAM | /now/ham |
| CMDB Steward | CMDB | CMDB workspace |
§3 — Employee (across modules)
3.1 Day-in-Life
| Time | Action | Where |
|---|---|---|
| 8:00 | Log into /esc Employee Center | Web/Mobile |
| 8:30 | Open HR case (e.g., “Salary certificate”) | /esc → HR topic |
| 9:30 | Request a new monitor (ITSM Catalog) | /esc → Catalog |
| 10:30 | Check open tickets | /esc → My Cases |
| 14:00 | Complete annual policy acknowledgement (GRC) | /esc → Tasks |
| 16:00 | Submit time-off (HR Leave app or HRSD) | /esc → HR Services |
3.2 Top 5 employee actions
- Browse Topics (Catalog + KB)
- Open a case / request / leave
- Track their requests
- Acknowledge policies / training
- Update their profile
3.3 What powers it
- Service Portal /esc + widgets
- Mobile App (Now Mobile)
- Notifications (email + push)
- Virtual Agent (24/7 self-service)
- KB Suggester (when typing description, suggest articles)
§4 — Manager (universal approval persona)
4.1 Day-in-Life
| Time | Action |
|---|---|
| Morning | Open approvals queue (email digest + mobile) |
| Approve leave requests, hardware requests, change requests | |
| Review team SLAs in dashboard | |
| Lunch | 1:1s with reports — check open employee cases |
| Afternoon | Approve project funding (SPM Demand) |
| EOD | Review weekly attestation tasks (GRC) |
4.2 Top 5 manager actions
- Approve / reject in inbox
- Delegate authority during travel
- Review team metrics (utilization, on-time, SLA)
- Submit demand for new initiatives (SPM)
- Complete control attestations (GRC)
4.3 Mobile-first
Most manager actions happen on mobile via the Approval card UX — single-tap approve, swipe to reject.
§5 — IT Service Desk Agent (ITSM)
5.1 Day-in-Life
Refer to ITSM.md §17.2 for full detail. Quick recap:
- Workspace inbox (/now/sow/home)
- Triage P1/P2/P3 — assign to self or escalate
- Investigate, run KB, knowledge-suggest
- Apply fix, log activity, attach evidence
- Resolve + close + survey
5.2 Pro tips
- Use Alt+1..9 keyboard shortcuts
- Pin top 3 customer-impact dashboards
- Run “Bulk update” for known mass events
§6 — HR Agent (HRSD)
See HRSD.md §17.2-17.4 for full playbook (20 scripts).
Quick: handle HR cases with PII redaction, COE escalation, criteria-based hiding, Workday sync, KB suggestion.
§7 — CSR / Customer Service Rep (CSM)
See CSM.md §17.3 for full day-in-life (8 steps from queue to reply).
Quick: identify account via email domain, check entitlement, route to right team, use AI to summarize past cases, send branded reply.
§8 — Field Technician (FSM)
See FSM.md §17.3 for full mobile-centric day.
Quick: travel → arrive → start → consume parts → complete with signature → next WO.
§9 — Dispatcher (FSM)
See FSM.md §17.2.
Quick: map view, drag-drop WOs to technicians, optimize routes, handle emergencies.
§10 — Risk / Control Owner (GRC)
See GRC.md §17.2.
Quick: complete attestations on time, upload evidence, sign off controls.
§11 — SOC Analyst T1 (SecOps)
See SECOPS.md §17.2.
Quick: triage SIEM alerts, validate true/false positive, enrich IoCs, escalate to T2.
§12 — Vulnerability Owner (SecOps VR)
Quick: receive new VIs by team, prioritize, drive remediation within SLA, document accepted risks.
§13 — Project Manager (SPM)
See SPM.md §17.2 for hybrid waterfall/agile day-in-life.
Quick: review plan, update %complete, manage risks, run sprints, log timecards.
§14 — Resource Manager (SPM)
See SPM.md §17.3.
Quick: capacity heatmap, allocate, resolve over-allocations.
§15 — Citizen Developer (App Engine)
See APP_ENGINE.md §17.2.
Quick: describe app in plain English → AI generates → adjust → preview → share.
§16 — Pro Developer (App Engine + DevOps)
See DEVOPS.md for full DevOps workflow.
Quick: commit → CI runs → auto-CR → approve → deploy → monitor DORA metrics.
§17 — Executive (Cross-module)
17.1 Daily 5-min view
| KPI | Source |
|---|---|
| Open P1 incidents | ITSM |
| Major risks above appetite | GRC |
| Customer NPS trend | CSM |
| Project portfolio RAG | SPM |
| SecOps critical findings | SecOps |
| New ideas under evaluation | SPM |
| Cost variance YTD | SPM / ITAM |
| Employee NPS / pulse | HRSD |
All on one UI Builder Executive Dashboard.
17.2 Weekly digest
Auto-emailed Monday 7am with one-pager from each module.
§18 — CMDB Steward
18.1 Day-in-Life
- Open CMDB Workspace
- Review CMDB Health score
- Investigate stale CIs (no update >30 days)
- Resolve duplicate CIs (IRE conflicts)
- Add new authoritative source (e.g., Azure)
18.2 Top 5
- Identification rules (IRE)
- Reconciliation conflicts
- Stale CI cleanup
- CSDM compliance check
- Relationship maintenance
See CMDB.md for full playbook.
§19 — Asset Manager (ITAM)
19.1 Day-in-Life
- Process receiving — match PO to incoming
- Allocate assets to users
- Investigate “Missing” assets
- Run reclamation report (SAM)
- Plan refresh cycle
See ITAM.md §17 for the full deep-dive.
§20 — Auditor (Internal/External)
20.1 Day-in-Life
- Open Audit Engagements list
- Plan walkthrough (process owners)
- Test controls (sample, test, document)
- Raise findings with evidence
- Track remediation
See GRC.md §17 sub-section on auditor persona.
§21 — Common workflows for each persona
21.1 Approve / Reject
| Persona | Where |
|---|---|
| All approvers | Inbox + Mobile push |
| Bulk approve | Workspace bulk action |
| Delegate | User Profile → Delegate during travel |
21.2 Search
| Search type | Method |
|---|---|
| Records | Global search header |
| KB | Service Portal search box |
| Federated (across modules) | AI Search (Now Assist) |
21.3 Notifications channels by preference
| Channel | When |
|---|---|
| Default | |
| In-app | Workspace inbox |
| Push (mobile) | Time-sensitive (approval, P1 incident) |
| SMS (Twilio) | Critical/emergency (Sev 1 SecOps, outage) |
| Teams/Slack | Team-level (project, incident channels) |
§22 — Persona engagement levels
| Level | Engagement | Training need |
|---|---|---|
| Frequent (daily) | Agent, technician, analyst, PM | Full training course (1-3 days) + ongoing |
| Regular (weekly) | Manager, control owner, asset mgr | ½-day training + quick-reference card |
| Occasional (monthly) | Employee, auditor | 30-min video + portal walkthrough |
| Rare (annual) | Vendor (1× attestation) | Self-service portal with clear nav |
§23 — Persona-to-feature mapping (one-look)
| Feature | Personas affected |
|---|---|
| Employee Center /esc | Employee, Manager, Auditor (read) |
| Service Portal /sp (legacy) | Employee, Customer (CSM /csm) |
| ITSM Workspace /now/sow/home | Service Desk, ITIL roles |
| HRSD Workspace /now/hrx/home | HR Agent, COE Specialist |
| CSM Workspace /now/cwf/agent | CSR, T2 Engineer, Account Mgr |
| FSM Dispatcher /now/fsm/dispatcher | Dispatcher |
| Now Mobile | Field Tech, Manager (approvals), Employee (lite) |
| GRC Workspace | Risk/Control Owner, Compliance, Auditor |
| SecOps Workspace /now/sir/agent | SOC Analyst, IR Manager |
| SPM Planning Console | PM, PMO, Resource Mgr |
| App Engine Studio /now/app-engine-studio | Citizen Dev, Pro Dev, CoE |
| Now Assist Studio | AI Builder, Skill Author |
| AI Agent Studio | Agent Builder, Solution Architect |
| Dashboards (UI Builder) | Executive, Manager |
| Performance Analytics | Analyst, Exec |
§24 — Top 10 cross-persona scripts (reusable)
Each module file has its own scripts in §17. These are common patterns reused across:
| # | Pattern | Used by |
|---|---|---|
| 1 | Email-domain auto-link to Account/Org | CSM, HRSD |
| 2 | Multi-tier approval engine | ITSM, HRSD, SPM, GRC |
| 3 | SLA pause on waiting | ITSM, CSM, HRSD |
| 4 | Bulk-notification (push + email + SMS) | All |
| 5 | Skill-based routing | ITSM, CSM, FSM |
| 6 | KB suggester for description | All |
| 7 | Now Assist summarizer | All |
| 8 | Audit-trail composer | All |
| 9 | Org-chart traversal (manager + skip-level) | HRSD, ITSM (approval chain) |
| 10 | Bulk-update with permission scope | All |
Reusable Script Includes live in your scoped app or global scope, and each module references them.
§25 — Training resources by persona
| Persona | Hours | Method |
|---|---|---|
| Daily users | 8-16 | Instructor + hands-on + quizzes |
| Weekly users | 2-4 | Recorded video + role-specific lab |
| Occasional | 0.5-1 | Embedded onboarding tour |
| Rare | 0.25 | Self-service portal |
§26 — Persona scorecard template
After 30 days post go-live, measure each persona:
| Metric | Target |
|---|---|
| Adoption % (logged in last 30 days) | ≥ 85% |
| Productivity uplift (tasks/day) | +20% |
| User CSAT on tool | ≥ 4.0 / 5 |
| Time-to-competency (new joiner) | ≤ 5 days |
| Self-service deflection | ≥ 30% |
| Mobile usage (where relevant) | ≥ 40% of actions |