Capturing a Role Removal from an ACL in an Update Set

[maryamalona]

Is there a way to capture the removal of a role from an ACL in an update set?

Here's the scenario:

• In DEV, I added a role to an ACL and moved the change to TEST via an update set.
• Later, in DEV, I removed that role from the same ACL and promoted a new update set to TEST.
• However, after applying the update set in TEST, the role is still associated with the ACL.

Has anyone encountered this before? Is there a specific way to ensure that role removals from ACLs are captured and propagated through update sets, or is a manual cleanup required in the target instance?

[glideFather · Accepted solution]

ahoy @maryamalona,

this looks like you were moving just the ACL record but not the associated ACL roles (two different tables, see the coloured highlights below):

You can hover over left-side from the role to get the (i) icon that can be opened in a new window:

Or you can navigate to the table:

https://yourDomain.service-now.com/sys_security_acl_role_list.do

This is how you can add or remove roles from a specific ACL record. Let me know if it was the case

__EDIT__

you might know it but will just leave it here anyway.. to update ACL you need elevated role (security admin), once changed that update set can be moved by a regular admin..