
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎01-17-2024 07:49 AM
It seems that everyone has the ability to add/delete relationships. I want to remove the ability to delete them from everyone, but the SN Admins. What I am talking about:
When you open a CMDB CI and it has the CI Relations (Formatter) added to it. You click the "+" icon on the right side of the Related Items.
We want the ability to hide the trashcan for the Relationships based on who has the admin role.
Is this possible?
Thank you for your insights, Charles
Solved! Go to Solution.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎01-18-2024 12:01 AM - edited ‎01-18-2024 12:12 AM
Hi @cgedney
The CI relationships are present in cmdb_rel_ci table.
There is OOTB delete operation ACL on cmdb_rel_ci that allows only asset or itil role to delete cmdb_rel_ci records.
(ACL: https://your_instance_name.service-now.com/nav_to.do?uri=sys_security_acl.do?sys_id=810de16dc0a80166...
You cannot hide the trashcan but you can prevent the deletion of CI relationship by updating the ACL above
Steps:
- Uncheck the 'Admin overrides' checkbox field
- Remove itil and asset roles from 'Requires role' section
- Add 'admin' role in 'Requires role' section
Now, whenever any non-admin user tries to save the record after clicking the trashcan icon. They will see the "User not authorized to delete relationships" error message as shown below.
Please mark this response as correct or helpful if it assisted you with your question.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎01-18-2024 12:01 AM - edited ‎01-18-2024 12:12 AM
Hi @cgedney
The CI relationships are present in cmdb_rel_ci table.
There is OOTB delete operation ACL on cmdb_rel_ci that allows only asset or itil role to delete cmdb_rel_ci records.
(ACL: https://your_instance_name.service-now.com/nav_to.do?uri=sys_security_acl.do?sys_id=810de16dc0a80166...
You cannot hide the trashcan but you can prevent the deletion of CI relationship by updating the ACL above
Steps:
- Uncheck the 'Admin overrides' checkbox field
- Remove itil and asset roles from 'Requires role' section
- Add 'admin' role in 'Requires role' section
Now, whenever any non-admin user tries to save the record after clicking the trashcan icon. They will see the "User not authorized to delete relationships" error message as shown below.
Please mark this response as correct or helpful if it assisted you with your question.