Chrome tab availability for specific role user in service operations workspace

[axtsxna]

Hi, I am working on Service Operations Workspace and want this chrome tab ("New Change Request") to be available for just a specific role user and not itil. How can I achieve this with ACL's ?

[Tai Vu · Accepted solution]

Hi @axtsxna 

That tab is managed through UX Page Property named chrome_tab.

At the condition > tableDescription > canCreate, this is only visible if the user can create a record on that table.

So you can change the ACL Create in the table to control the visibility of the item accordingly.

{
    "label": {
        "translatable": true,
        "message": "New Change Request"
    },
    "routeInfo": {
        "route": "create-change-request-page",
        "fields": {},
        "multiInstField": ""
    },
    "condition": {
        "tableDescription": {
            "table": "change_request",
            "canCreate": true
        }
    }
}

In the other hand, if you wouldn't like to change the ACL, you can modify the property by adding new attribute roles into the condition to apply specific for workspace.

Sample

{
    "label": {
        "translatable": true,
        "message": "New Change Request"
    },
    "routeInfo": {
        "route": "create-change-request-page",
        "fields": {},
        "multiInstField": ""
    },
    "condition": {
        "tableDescription": {
            "table": "change_request",
            "canCreate": true
        },
        "roles": ["admin"]
    }
}

Cheers,

Tai Vu

[Tai Vu · Accepted solution]

Hi @axtsxna 

That tab is managed through UX Page Property named chrome_tab.

At the condition > tableDescription > canCreate, this is only visible if the user can create a record on that table.

So you can change the ACL Create in the table to control the visibility of the item accordingly.

{
    "label": {
        "translatable": true,
        "message": "New Change Request"
    },
    "routeInfo": {
        "route": "create-change-request-page",
        "fields": {},
        "multiInstField": ""
    },
    "condition": {
        "tableDescription": {
            "table": "change_request",
            "canCreate": true
        }
    }
}

In the other hand, if you wouldn't like to change the ACL, you can modify the property by adding new attribute roles into the condition to apply specific for workspace.

Sample

{
    "label": {
        "translatable": true,
        "message": "New Change Request"
    },
    "routeInfo": {
        "route": "create-change-request-page",
        "fields": {},
        "multiInstField": ""
    },
    "condition": {
        "tableDescription": {
            "table": "change_request",
            "canCreate": true
        },
        "roles": ["admin"]
    }
}

Cheers,

Tai Vu

[RishiG]

@Tai Vu is there  a way to restrict on the basis of specific groups as well? i have tried roles it looks good but need to restict the respective label on the basis of logged-in user group i.e., the user should not be a part of xyz group. 

[Greg Trautmann]

Did you ever get an answer on this specific point?  We have a similar use case

[LaxmiPrasanna P]

Hi @Tai Vu,

It works perfectly fine if we want to restrict it for one role. How can we restrict these tabs for more than one role? I tried with "roles": ["admin1","admin2"]. But this is not working. Can you please help?