Anyone can edit cmdb_ci records

[VaishaliGoy]

Hi Everyone,

Any user with itil role can edit cmdb_ci data. We have not made any customization in instance, everything is OOTB.

Please help in rectifying the issue.

Thanks in advance.

@Gagan Jolly 

@Anubhav Ritolia 

@Chuck Tomasi 

[Dr Atul G- LNG]

Yes, that is correct and expected behaviour. An ITIL user can make changes.

[Dr Atul G- LNG]

Have a look here

https://www.servicenow.com/community/itsm-forum/itil-users-should-have-read-only-access-to-the-cmdb-...

https://www.servicenow.com/community/cmdb-forum/cmdb-edit-access/m-p/2519963

[Its_Azar]

Hi there @VaishaliGoy 

Out-of-the-box ServiceNow configuration allows all users with the ITIL role to create, edit, and delete CIs .