How to restrict view on user and attachment table

[vinitaraico]

Hi Team,

Any ITIL / NONITIL user is trying to access  direct link https://myinstance.service-now.com/sys_user_list.do all user records are visible ,How we can restrict it?

Also seems this table is used as a referenced   field in Requester for /Requested By in catalog if we restrict here it will impact our catalogs and smart reporting as well ,Is my under standing is correct

There are many OOTB table where we dont have any read level restriction  ,How we can restrict on the basis of our need

[Ravi Chandra_K]

Hello @vinitaraico 

Yes, this will restrict wherever user reference is used.

Kind regards,

Ravi Chandra 

[Ankur Bawiskar]

@vinitaraico 

there are many OOB table level READ ACL on sys_user which should restrict

did you check that?

If my response helped please mark it correct and close the thread so that it benefits future readers.

[vinitaraico]

Hi Ankur,

Thanks for revert ,Yes I checked read level ACL on sys_user table  in our case snc_internal/abc_xyz_user(end user ) role is added in each profile  ,Now if I restrict this   will this not Impact on Catalogs (Requested For) filed where user table is reference  ..I just wanted to understand the impact  before restricting any end user  role on  table .