Which OOB Role can be applied to a User Group to disable Case Create New ? Sample CS will also help.

[M Bala Krishna]

I want to disable access to Create New Cases for specific User Groups using ServiceNow OOB Roles.
e.g. a user say 'Jonathan' from a group say 'Service Desk' should only have Read-only access to Cases. The user should not be able to access All->Cases->Create New. However, the user can access any case for Read-Only.

If there is no OOB Role(s), how can we achieve the same restriction using Client-Script/UI Policy ? A sample script/policy would really help.

Would appreciate a quick help.
Thank You.

[AshishKM]

Hi @M Bala Krishna, 

Apply the restriction at ACL [ create ] level, add the script to check current user belong to specific group or not, based on result return the true/or/false value.

-Thanks,

AshishKM

[M Bala Krishna]

Thank You @AshishKM for your quick response. 
sorry to say I don't have privileges to elevate to security_admin to work with ACLs. So have to limit to Client Script/UI Policy at the moment.

Would be helpful if any sample CS/UI Policy is provided. 
Thank You.