Auto assignment of sn_cmdb_user for CMDB Workspace

[Joseph Lighthal]

How should I be managing the assignment of the role sn_cmdb_user? I would think this role should be automatically assigned in the situation a cmdb_data_management_task is assigned to a specific individual but that is not the case. I'm curious should I make a business rule to automatically assign the role? What do you recommend?

[Joseph Lighthal]

Sorry for not responding. I ended up performing assignment based on a business rule if a user was set on (I forget), the assigned_to field on the cmdb table that I was performing data certification on. Doing this by group would always end up assigning the role to users that are not assigned the certification task. Also doing this with a flow using a catalog item makes this a process with friction for the end user. 

While I agree normally I would not perform assignment in this fashion however since the task can be directly assigned to a user it only makes sense to me that the user would be granted the role. Likewise if the task was assigned to a group I would think the role assignment should be auto performed on the group.

[Tony Branton · Accepted solution]

Hi Joesph,

Thanks for the question and feedback.  Auto-assignment of a role to a user assigned a task is being reviewed as a future enhancement to Data Manager for Data Certification. 

The one difference in relation to your original question is that the data_manager_user role would be used.  The reason for this is that access to the Tasks section in the forthcoming Service Graph Workspace will use this role so users do not necessarily need to be granted access to the CMDB.  In this scenario, a user with the data_manager_user role is able to open Service Graph Workspace and access Tasks only.

[Joseph Lighthal]

Thanks @Tony Branton! It has been sometime since I asked the question and I honestly think I ended up using the sn_cmdb_user role instead since that grants the role I mentioned. I believe I decided to grant that to users if cmdb_ci_service_auto.owned_by was set and they didn't have the role. That was the assignment for the data certification. I swear I had seen a business rule that will also grant that role to their manager but it has been some time and I forget. Regardless thanks for your response!