Asset Management: Role suggestion for hardware read only access

Shawn Horley
Kilo Guru

Carrying along with my building the Asset Management plugin for our instance I am wondering about the appropriate roles.

I have created a hardware asset management admin group for our Asset Managers to be able to add, update, and remove entries as required and have given that group the Asset role. That was easy to determine.

Not so easy for me to determine is the role I should use for a group that will essentially only have read access to the hardware assets. The role description in the docs site are not detailed enough for me to know which of the listed roles there would provide that. I see the inventory_user role, but the description only says that that role allows for accessing stock information, and creating and managing transfer orders... If my techs only have that role will they be able to see the hardware assets at all?

Any feedback on this would be great.

Cheers

A.

1 ACCEPTED SOLUTION

Try the following:

create a new role "inventory_user_readonly"

let the new role contain the inventory_user role

give the new role to the respective person (via a group)

here is the tricky part: you will have to modify all relevant Access Controls (write and delete) - I counted 4: write a script for these ACs like:

var currentUser = gs.getUser(); 
answer = !currentUser.hasRole('inventory_user_readonly');

you could also put in a proper if and then return the answer; but you want to return a false if the user has the role in order to have the AC deny access.

If it dosn't work, roll back everything you did.

Kind regards

View solution in original post

7 REPLIES 7

YASHIK RAMMOHAN
Tera Contributor

Are there any roles available in ServiceNow platform for Hardware Asset Management (HAM) ? If yes can someone send me the link where that knowledge resource can be specifically located within ServiceNow Docs ? I did try my best to find it but with no success. Thanks

Here are the roles that are explicitly added with HAM:

sebastian_g_snc_0-1674648696961.png

hope that helps