---
title: Empty Roles Assigned To A Group
description: "**Impact area** Security **Severity** Low **Affected element** User Group ## Rule ID **SN-0448** ## Impact This rule checks for rows on the sys_group_has_role table (Group Roles) which contain empty role references. If there are unassigned roles it could mean a…"
url: "https://community-staging.qualityclouds.com/qcdocs/qc/servicenow-rules/empty-roles-assigned-to-a-group/"
updated: "2025-03-21"
category: Rules
---

# Empty Roles Assigned To A Group

**Impact area**

Security

**Severity**

Low

**Affected element**

User Group

## Rule ID

**SN-0448**

## Impact

This rule checks for rows on the sys_group_has_role table (Group Roles) which contain empty role references. If there are unassigned roles it could mean a potentially loss of functionality of certain apps as some may require roles. Also empty roles assigned to a user generate extra effort to security administrators and can lead to improper access control.

Remediation

 Edit the role field in the sys_group_has_role table and change the empty reference to the a valid one or delete the record if it is not needed

**Time to fix**

10 min