Access to CI class manager to create Orphan, Staleness and Health inclusion rules

[Shreya Jain1]

I've a requirement to give write access to some users to define recommended fields and create Staleness, Orphan and Health inclusion rules using CI class managers. 

Users are having itil role so they can access CI class manager but ITIl role do not give write permissions and we don't want to give itil_admin role to users. 

I've tried creating ACLs on cmdb_health_config, cmdb_recommended_fields which gives them permission to create health inclusion rules and to define recommended fields from backend but they can't do from CI class manager. 

Does anyone know how can i give them write permissions to create/modify rules using CI Class Manager without giving itil_admin role. 

Regards,

Shreya

[Anshu_Anand_]

Hi @Shreya Jain1 

Its not possible what you asking for without giving itil_admin role .

I know it comes with a license cost but there is an alternative you can try.

give itil_admin role if needed on demand or for a temporary time.

https://docs.servicenow.com/bundle/xanadu-platform-administration/page/administer/roles/concept/time...

https://www.servicenow.com/community/now-platform-articles/washington-s-time-limited-user-roles/ta-p...

Hope its helpful

[Shreya Jain1]

We don't want to give itil_admin role even temporarily. ITIL Admin gives delete permissions in INC/PRB/CHG and other permissions also it gives. 

Any other suggestion from anyone?

[Saurav]

personalize_dictionary role , but that gives even higher permissions.

[Marshall Parker]

There is an admin level role specific to the CMDB that you should be able to use for this purpose.  Look into the role sn_cmdb_admin - this should not extend any other ITIL processes, but does allow for configuration of the CI Class Manager, Health Rules, etc..