Hide ServiceNow Incidents and Changes for Security Purposes

sgroat
Tera Contributor

Hey everyone:

 

For security purposes on ServiceNow Incidents and Change Requests, is there a way to only have certain Categories or Assignment Groups have access to view Incidents and Change Requests. For example, any Incident or Change Request related to Cyber Security, our head of Cyber Security only wants his personnel to be able to view them. 

 

Thanks,

3 REPLIES 3

Kay Adcock
Tera Contributor

I know for Change tickets, you can create a change model specifically for this group.  On that change model, you can use the "Advanced Security" feature on the change model to specific a targeted assignment group.

jaubert
Tera Guru

I did something similar by using a client script.  I used g_form.removeOption() to accomplish this.  Hope this helps.

 

Updated: More specifically : 

function onLoad() {
   //Type appropriate comment here, and begin script below
    if(!g_user.hasRole('role')){
g_form.removeOption('category', 'categoryname');
 
}

Harel1
Tera Contributor

I would use a before query business rule to limit access using roles or groups

I think this can help you:

Controlling record access using 'Before Query' business rules - ServiceNow Guru

Edit: not entirely sure this would work on a specific category though.

 

harel