Hi Team,
I have created an email account to establish the connection between ServiceNow and Outlook.
Additionally, I have created an Assignment Group and set its type to ITIL. I have also created the required role, associated the application with the role, and created a custom application for the respective users.
After that, I also created an ACL for the Read operation. I specified the required role and condition and added the following script:
answer = gs.getUser().isMemberOf('current.assignment_group');
I also created another ACL to allow users with the specified user profile to view all the tickets.
However, the user is still unable to view the tickets. I checked and found that the Ticket table is a child table of the Task table, so I provided the ITIL role to the user.
After assigning the ITIL role, the user is also able to view Incidents, which is not the intended behavior.
Should I modify or remove the two ACLs that I created and instead create a separate ACL to restrict the user to viewing only the required INC records?
Please suggest the best approach for implementing this access restriction.
Note :- After ITIL user can able to work all custom application work which I have created then how we proceed for stopping further things like INC and Task .
