
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎09-14-2017 01:55 AM
Folks,
There is a small doubt I have on which I need clarification. Any feedback would be helpful.
Most of us are aware of this User Criteria function in ServiceNow which gives us the ability to restrict data access to a group. We can create user criteria records that define conditions for user information. Then apply these criteria records to control access to these items and categories.
"Knowledge Administrators" (one with knowledge_admin role) can only create knowledge bases and manage the default knowledge base (i.e., which have been assigned to them).
My understanding states, only ServiceNow administrators can control access to content in the knowledge bases by creating and applying or defining user criteria records. We can create user criteria records that define conditions for user information. Then apply these criteria records to control access to these items and categories.
My question is... The following understanding that I stated above; is this correct ??
Can someone with a knowledge_admin role could also do the above (i.e., define a user criteria for knowledge bases) ?
If not, please enlighten me.
Solved! Go to Solution.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎09-14-2017 02:48 AM
"user_criteria_admin" can define User Criteria. Not the knowledge_admin. This "user_criteria_admin" role also included in "catalog_admin" so basically defining user criteria is allowed the users how has user_criteria_admin or catalog_admin or admin roles.

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎09-14-2017 08:08 AM
Thanks for the input Dave!
Yes, you are right. Prior to your reply, with rajukoyagura's response, I was able to figure out the missing link. I do agree with you on the fact that in reality many organizations don't observe the Principle of Least Privilege and presume admin is needed, so they overlook these other roles.
Yes, the admin role should be perceived as the rights to bestow additional privileges onto other users.