ACL to restrict import set to certain tables

[othomas1]

Hello community,

I am attempting to right an ACL to allow for a specific group to use import sets, but the only tables they should be able to import into should be tables where the name contains "cmdb_ci". Would this be able to be done in a single ACL?

[DScroggins]

Hi, You can create ACLs on each of the impost set tables which you want to restrict and allow those groups access. You will need an ACL for each table which you want to lock down as this cannot be done using a single ACL..

[othomas1]

Thanks for the reply, so if i only wanted those group of users to use the import sets for tables with the name that contains "cmdb_ci", those would all be single ACL's?

[Pooja Mallikarj]

Hi,

If you want to allow for specific group of users to use import set tables which contains cmdb_ci  means, you need to create a table level ACL , in which you have to select your import set table and you can assign group role in that.

And if you want to allow for all tables which contains name cmdb_ci  ,then you can not achieve this by single ACL .You need to create separate ACL for each cmdb_ci import set table.

Mark it as correct/helpful if it helps for you.

Regards,

Pooja

[DScroggins]

Yes you would need to create single ACL's for each of the import set tables which you want to restrict. You can utilize the same advanced script to check if the users is a member of the approved group i.e:

answer = gs.getUser().isMemberOf(­GROUP NAME);