Customer Service Management ACL missing * for field write

ChrisGetint
Tera Expert

Hello,

I'm setting up a dedicated user who should only have access to Case table.

This user should be able to create, read, and write cases at will; however, when setting up the ACLs for this custom user, I'm unable to select * for writing all fields within the case work item.

ChrisGetint_0-1750768400064.png

 

I do know that sn_customerservice_agent is a role that has proper access to read, write, and create cases, however, this role has permissions and access that aren't interesting  for this setup.

Why can't I select *? I can see that this ACL exists, but when I try to edit it and change one of the roles that it's associated with, it removes the * and switches to --None--, and I'm afraid it might end up saving as --None-- and I mess up the ACL...

ChrisGetint_1-1750768540981.png


How can I create this ACL? Is it an issue with the module?

1 ACCEPTED SOLUTION

@ChrisGetint 

select scope from here and then create ACL you want (Create, READ, Table.None Write and Table.* WRITE)

Remember simply allowing ACLs won't help. there are lot of things involved around CSM

but that should help you get started

AnkurBawiskar_0-1750770750077.png

 

If my response helped please mark it correct and close the thread so that it benefits future readers.

Regards,
Ankur
Certified Technical Architect  ||  9x ServiceNow MVP  ||  ServiceNow Community Leader

View solution in original post

4 REPLIES 4

Ankur Bawiskar
Tera Patron
Tera Patron

@ChrisGetint 

You should be in CSM Scope to create * ACL.

why not ensure the existing OOTB ACLs allow this user?

Give this user the correct roles associated to those ACLs and you need not create anything separately.

If my response helped please mark it correct and close the thread so that it benefits future readers.

Regards,
Ankur
Certified Technical Architect  ||  9x ServiceNow MVP  ||  ServiceNow Community Leader

I apologize, as I'm still not very versed in ServiceNow, but what would it mean to be "being in CSM Scope"?
Do you have any documentation on how to do that?

As I mentioned, this dedicated user can't be associated with the roles from CSM product due to particular reasons.

However, I believe that once we can create * write ACL, it should be fine for us.

@ChrisGetint 

select scope from here and then create ACL you want (Create, READ, Table.None Write and Table.* WRITE)

Remember simply allowing ACLs won't help. there are lot of things involved around CSM

but that should help you get started

AnkurBawiskar_0-1750770750077.png

 

If my response helped please mark it correct and close the thread so that it benefits future readers.

Regards,
Ankur
Certified Technical Architect  ||  9x ServiceNow MVP  ||  ServiceNow Community Leader

That was extremely helpful, the piece I was missing!

Thanks @Ankur Bawiskar , you are the best.