The CreatorCon Call for Content is officially open! Get started here.

Security around survey results

RBlor
Mega Guru

We have several surveys going around our company for different things , (change requests, new hires, incidents)  what is the best way to lock down the survey to only have certain people view the results. Do i need to remove survey_reader role from everyone and give custom roles and ACLs per survey?

4 REPLIES 4

Pradeep Thipani
Mega Sage
Mega Sage

Hi @RBlor ,

 

To meet the requirement, add ACLs to the survey table to restrict access to view survey results.

 

Survey reader [survey_reader]

View surveys and related information, such as survey responses, survey groups, scorecards, and reports.

 

If survey_reader role has been given to the table by OOB better to remove the role to users who don't want to access to survey responses.

 

Thanks,

Pradeep

"If this response was useful, please select 'Accept as Solution' and mark it as 'Helpful.' This helps me provide better answers and assists the community ".

Regards,
Pradeep

We want certain groups to access the results for the change request survey and another group to view the results of the incident survey, how would we do this without the 2 groups bein able to see both results?

Control access using ACLs by creating specific roles and applying them to the required groups. Create ACLs on the table with conditions filtering based on change or incident criteria, and assign the new roles to the respective groups as needed.

 

Thanks,

Pradeep

"If this response was useful, please select 'Accept as Solution' and mark it as 'Helpful.' This helps me provide better answers and assists the community ".

Regards,
Pradeep

@Pradeep Thipani 

 

Question on this. Our HRSD team is implementing surveys on behalf of other HR individuals (example is we published a survey asking for feedback on a recent HR event). We want those individuals asking for a survey to be able to view the results, but some don't have access to the back-end of SNow/they aren't HR agents who work cases. I tried giving someone the survey_reader role, but that doesn't also give her access to the back-end. Which role would she need to have added to give her access to the back-end to view the survey results?