Fields visible to only admin role ?

snow_hard252
Kilo Contributor

Hi,

I have created few Fields with Reference as Custom Tableson cmdb_ci.

The problem I see is these Fields are visible only to role admin, there are couple of other custom fields that are visible to every role.


I looked at ACLs but nothing I could relate to.

How can Fields as whole not be seen on few roles and can be seen on admin.


Thanks

Hardy

1 ACCEPTED SOLUTION

Hi Hardy,



To confirm if the ACLs are the root cause you can do the following test:



1. Disable 'Admin Overrides' and see if you still can see those fields. If you can't then it has to an one or more ACLs causing it.




If it's an ACL issue then:


1. As admin go to "System Diagnostics -> Debug Security"


2. Impersonate as the user that has the restriction and try again to view those fields. This will show which ACLs is restricting you.




Regards,


Sergiu




View solution in original post

10 REPLIES 10

sergiu_panaite
ServiceNow Employee
ServiceNow Employee

Hi Hardy,



Do you have any ACLs acting on those fields/tables where "Admin overrides" is set ?


This would allow user admin to see these fields but based on the ACL return might block other users from seeing them.



Regards,
Sergiu


HI Sergiu,



I do have the 'Admin Overrides' set , but for the same fields I have ACL defined for write based on a role ecmdb_admin.


I have field level ACL defined on role ecmdb_admin , I have table level ACL defined for emcdb_admin or current user=owner of CI.



Thanks


Hardy


Hi Hardy,



To confirm if the ACLs are the root cause you can do the following test:



1. Disable 'Admin Overrides' and see if you still can see those fields. If you can't then it has to an one or more ACLs causing it.




If it's an ACL issue then:


1. As admin go to "System Diagnostics -> Debug Security"


2. Impersonate as the user that has the restriction and try again to view those fields. This will show which ACLs is restricting you.




Regards,


Sergiu




Hi Sergiu,



I just checked Disabling 'Admin Overrides' for one field and admin can still see this.


But the ecmdb_admin cannot see this.



Thanks


Hardy