Allow Group 'Manager' to manager their group membership

[CCZMAX1]

Hi, is it possible to allow the person listed in the 'Manager' field on the Groups form the ability to manage that teams membership to, i.e. add/remove users?  Is the Manager field used in any process or role that I need to grant/configure or is it just a none actionable field only used to identify who the organizational manager of the team is?

Many thanks

Maxine

[newhand]

HI@CCZMAX1 

I have the same question .

I tried it in my pdi,and seems that the "Manager" is just a field to identify  who is the manager.

[Musab Rasheed]

Hello,

Generally you need user specific role in order to manage groups and Manager field on Group form is purely for information purpose and nothing else. You can give role like user_admin in order to give Manager ability to manage groups.

[CCZMAX1]

Thanks Musab.  I tried that and unfortunately it gives users full access to CRUD.

I created a new ACL and assigned a new Role to it.  I granted write access to a field in sys_user_group in the ACL and assigned the new role to it.  I applied the role to an individual user for testing and it works in part.

I'll have to figure out to add a script or condition that will only allow the manager of that group with the new role I created to edit the membership list.

Max

[Musab Rasheed]

I still say you don't modify OOB ACLs as mentioned in Article but create Catalog item and give control to group managers to modify , this way you will not modify anything related to OOB setup. Please see reply from Allen on this.

https://www.servicenow.com/community/secops-forum/allow-group-managers-to-manage-group-members/m-p/1...