The Customer Actions feature in the Security Center allows administrators to take targeted actions such as reviewing privileged user access and managing accounts that might pose a risk. It is specifically designed to enable organizations to identify and remediate risks associated with user privileges, such as excessive access rights or orphaned privileged accounts. This feature aggregates risk data and prompts action items, allowing administrators to review, approve, or revoke privileged access based on current organizational policies.
While Security Hardening focuses on platform configurations and the Security Posture Console provides an overview of security metrics and trends, Customer Actions is the practical tool for directly managing and reviewing privileged access to ensure least privilege principles are enforced.
References:
ServiceNow Security Operations Product Documentation, Security Center > Customer Actions ServiceNow System Administrator Study Guide, Security Operations Chapter ServiceNow Docs: Customer Actions