Easy Import for role other than admin

Go to solution
andreanorris
Tera Contributor

‎09-13-2017 10:40 AM

We have a requirement to provide import access to roles outside of admin. Our Asset Admin has all of the import roles mentioned in the wiki, but is still unable to see the Import link in the context menu. How do I give import access without granting the admin role?

Labels:
  • 12,687 Views
1 ACCEPTED SOLUTION

Go to solution
Emerce2000
Kilo Expert

‎02-02-2018 05:52 AM

We literally just closed a support call the other day on this, that was open for 6 months. While this used to be possible, it has been removed they say because of security risk. This is the response we got from Servicenow.



"2018-01-31 09:00:17 PST - Rajesh (NOW)


Hello Jim,
        We have heard from our Dev team regarding PRB "PRB1246175" which i have opened to address the issue.
        Our Dev team is saying that since the product is working as per security design they can't implement the Import functionality back for non-admin users.


        So they have set the PRB state as can't confirm."  



A possible work around in my opinion would be to just give the users you wish to have the Easy Import functionality the import_set_loader role. Now you don't want to only do that. Also do the following:


  • You will want to remove the exposed admin level Import Loading menu items from that role so the Easy Import users don't go "Gee whats this?" and stumble into something you don't want them to get to.
  • Then adjust the ACL's to make sure the user only gets this ability on the tables where you want them to.


As a final precaution you could only give them access to a staging table ( one you create just for this ) where they can send the data, then have a scheduled job process whats in that table every so often. The benefit of this method is you have time to catch something instead of it going right into the active destination table.



Just my two cents...


View solution in original post

4 REPLIES 4

Go to solution
dravvyramlochun
ServiceNow Employee
ServiceNow Employee

‎09-13-2017 10:47 AM

Hello



Please have a look at :


Grant access to Easy Import using a role



ACL to end user for Easy Import


0 Helpfuls

Go to solution
Emerce2000
Kilo Expert

‎02-02-2018 05:52 AM

We literally just closed a support call the other day on this, that was open for 6 months. While this used to be possible, it has been removed they say because of security risk. This is the response we got from Servicenow.



"2018-01-31 09:00:17 PST - Rajesh (NOW)


Hello Jim,
        We have heard from our Dev team regarding PRB "PRB1246175" which i have opened to address the issue.
        Our Dev team is saying that since the product is working as per security design they can't implement the Import functionality back for non-admin users.


        So they have set the PRB state as can't confirm."  



A possible work around in my opinion would be to just give the users you wish to have the Easy Import functionality the import_set_loader role. Now you don't want to only do that. Also do the following:


  • You will want to remove the exposed admin level Import Loading menu items from that role so the Easy Import users don't go "Gee whats this?" and stumble into something you don't want them to get to.
  • Then adjust the ACL's to make sure the user only gets this ability on the tables where you want them to.


As a final precaution you could only give them access to a staging table ( one you create just for this ) where they can send the data, then have a scheduled job process whats in that table every so often. The benefit of this method is you have time to catch something instead of it going right into the active destination table.



Just my two cents...


Go to solution
toddpreece
Giga Expert
In response to Emerce2000

‎07-08-2019 12:03 PM

I was literally just about to implement this for a specific use case.

Is the bottom line that giving a user this role will not enable them to import/update records via this method?

0 Helpfuls