How to build ACLs for variables in service catalog?

[johannes5]

Hi ServiceNow Community Developers

I am trying to build an access control for variables in the requested item (sc_req_item) table. When I try this out I can see the oob fields but for variables all I see is 'variables' I cannot see the actual variable names that I would like to build acls around. Do you guys know how do I build an acl for each variable within the service catalogue. Please advise.

Thanks,

Johannes

[Jim Coyne]

Permissions for Catalog Variables work differently than fields on a table.   Take a look at this Wiki article - Using Service Catalog Variables - ServiceNow Wiki

As the note in the articles says, OOB the role fields are not on the form so you will need to add them first.

[johannes5]

Hi Jim,

Thanks for the response however I cannot see the part that allows me to lock the field down to a role.

Johannes

[Jim Coyne]

You will need to personalize the Variable form (Personalizing Forms - ServiceNow Wiki) by adding the following 4 fields:

• Read roles
• Create roles
• Delete roles
• Write roles

Then you will be able to add the roles to the appropriate fields to lock your variables down.

[jfarrer]

There are several role fields on the Variable definition table that can be added (if they're not already there) to the form that control who can read and write to the variables. I'd definitely start with the Write Roles field that controls who can write to the variable after it's been submitted. I'd recommend starting with a default value for that field of itil, admin, or nobody depending on your needs, then modify it as necessary. Usually after setting the Write Role access is controlled by Catalog UI Policy or Catalog Client Scripts. Starting with Calgary release there are check boxes on those that allow you to apply it after the form is submitted as well as before.