Capturing a Role Removal from an ACL in an Update Set

maryamalona
Tera Contributor

Is there a way to capture the removal of a role from an ACL in an update set?

Here's the scenario:

  • In DEV, I added a role to an ACL and moved the change to TEST via an update set.
  • Later, in DEV, I removed that role from the same ACL and promoted a new update set to TEST.
  • However, after applying the update set in TEST, the role is still associated with the ACL.

Has anyone encountered this before? Is there a specific way to ensure that role removals from ACLs are captured and propagated through update sets, or is a manual cleanup required in the target instance?

1 REPLY 1

glideFather
Tera Patron

ahoy @maryamalona,

 

this looks like you were moving just the ACL record but not the associated ACL roles (two different tables, see the coloured highlights below):

glideFather_0-1793883187466.png

 

 

You can hover over left-side from the role to get the (i) icon that can be opened in a new window:

glideFather_1-1793883216387.png

 

Or you can navigate to the table:

https://yourDomain.service-now.com/sys_security_acl_role_list.do

 

This is how you can add or remove roles from a specific ACL record. Let me know if it was the case

 

__EDIT__

you might know it but will just leave it here anyway.. to update ACL you need elevated role (security admin), once changed that update set can be moved by a regular admin..


✂-----Cutting-out-the---✦AI-noise✦---All-replies-written-and-vouched-for-by-GlideFather---