- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
3 weeks ago
We have some Record Producers where we have created some Templates (listed under the Generated Record Data tab on the Record Producer). If we open an existing template, I only seem to be able to edit it if my name is in the User field. If someone else's name is in it, or it is blank, I don't not have permission to update it. It looks like this:
This is new. Our other environments are still in Xanadu, and I do have the ability to update Template records where my Name is NOT in the User field in those ServiceNow versions.
This is not good, because we sometimes need to update templates other admins have created, or the admin who created it is no longer with our company. Short of creating a new template, is there anyway someone whose name is not in the User field can update that template?
I tried searching the internet/community, and found where it said to check to see if you have the "admin", "catalog_admin", and "template_editor" roles, and I already have all 3. So that does not seem to solve it. I am not sure if I had some other role, or some ACL needs adjusting.
Thanks
Solved! Go to Solution.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
2 weeks ago
Not sure why, but I just got emailed regarding your reply from last Thursday!
It looks like there is a new feature called "Analyze Permissions" that helps identify these issues. We added a new Write ACL for anyone with the "admin" role, and that seemed to fix things.
Thanks
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
3 weeks ago
Enable Debug Security, and see which ACLs are failing. Adjust those or add new ACL for your use case.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
3 weeks ago
I have never had much luck with that, I guess I don't really know how to wade through the tons of rows of data it spits out and how to read it. But I did focus in on the ACLs. I compared Zurich to Xanadu, and found the new ACL causing issues. It looks like there is a new "Deny Unless" ACL that looks like this:
If I disable this ACL, I can update the record again, though I am not sure we want to do that long term. The odd thing is it looks it is supposed to deny access if the User is Not Authenticated. I am not sure why I, being an admin, would not be authenticated! Did ServiceNow change the authentication rules in Zurich?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
2 weeks ago
Not sure why, but I just got emailed regarding your reply from last Thursday!
It looks like there is a new feature called "Analyze Permissions" that helps identify these issues. We added a new Write ACL for anyone with the "admin" role, and that seemed to fix things.
Thanks