ACL in CMDB

salu · ‎05-21-2017

Hello,

I want restrict the write and delete access for cmdb_ci table.I want to provide write access only for when the user have cmdb_owner role or member of the assignment group of CI or assign_to of CI.

How can it achieved?

Can some one show a sample ACL for this?

Thanks

Saranya

Alikutty A · ‎05-21-2017

You can create a table level write ACL on cmdb_ci with the following script in it.

answer = false;

if(gs.hasRole('cmdb_owner') || gs.getUser().isMemberOf(current.assignment_group) || gs.getUserID() == current.assigned_to){

answer = true;

}

Thank You

Please Hit Like, Helpful or Correct depending on the impact of response

View solution in original post

Pradeep Sharma · ‎05-21-2017

Hello Saranya,

You have to configure the write and delete table ACL's on cmdb_ci and secure it via role and condition filter. No script required. Please refer screenshot for reference.

In roles, section add "cmdb_owner".

Condition filter:

Screen Shot 2017-05-21 at 10.48.11 PM.png

Reference:

http://wiki.servicenow.com/index.php?title=Using_Access_Control_Rules

salu · ‎05-22-2017

This solution was pretty simple