ACL user roles are not getting deleted in QA

surya76
Tera Contributor

i have removed two roles in READ ACL (snc_internal, x_gre_user) and added a new admin role to that ACL.

Totally 3 update set versions were captured, in payload XML also i can see the Changes were getting Captured.

when i moved this to QA only the admin role i added is getting reflected , the roles that i deleted are not getting deleted in QA.

i checked the role SYS_ID'S all are perfect.

What may be the reason causing this issue ?

1 ACCEPTED SOLUTION

-O-
Kilo Patron
Kilo Patron

ACL roles are captured in table sys_security_acl_role. Did you check the sys_ids of those records? It is the sys_id of those records that you should check, not the sys_ids of the roles.

View solution in original post

4 REPLIES 4

Yousaf
Giga Sage

Hi Surya,

This could be the reason. While roles (sys_user_role) are captured in an update set, the application of them to users and groups is not. This is just 'transient customer data' to ServiceNow. It can be different from system to system, like dev or test data.

You will need to apply the same changes manually to the target systems.

 

Reference : Deleting group roles is not captured in update set

 

Mark Correct or Helpful if it helps.


***Mark Correct or Helpful if it helps.***

surya76
Tera Contributor

i have removed two roles in READ ACL (snc_internal, x_gre_user) and added a new admin role to that ACL.(DEV)

Totally 3 update set versions were captured, in payload XML also i can see the Changes were getting Captured.(DEV)

when i moved this to QA all the three versions are getting captured in the same update set in QA.

BUT inside the ACL Only admin role i added is getting reflected in QA , the roles that i deleted(snc_internal, x_gre_user)are not getting deleted in QA.

 

Thats what it says if you read my answer and also refer to the link I refered. This is possible that they do not move with the update set so you will have to do it manually.


***Mark Correct or Helpful if it helps.***

-O-
Kilo Patron
Kilo Patron

ACL roles are captured in table sys_security_acl_role. Did you check the sys_ids of those records? It is the sys_id of those records that you should check, not the sys_ids of the roles.