If a change model has Write roles AND Can write defined, which users have the ability to modify the change model record? Choose 2 answers

The itil_admin role grants elevated ITSM process permissions but does not automatically grant write access to change model records when specific Write roles and Can write criteria are configured.

Users with the admin role bypass change model access restrictions by default and can always modify change model records regardless of Write roles or Can write criteria. When both Write roles and Can write are defined together (E), the system applies AND logic - a user must hold the specified Write role(s) AND match the Can write user criteria, ensuring that access is restricted to only users meeting both requirements simultaneously.

When both Write roles and Can write are defined, the logic is AND not OR - users satisfying only one condition are not granted access; OR logic would apply only if a single condition type is set.

The sn_change_write role grants general change write permissions across change records but does not override the specific access control set by Write roles and Can write criteria on individual change models.