How We can use Nobody Role ?

[Vishal Savajia1]

HI Team, 

A) I have requirement to restrict one column from editing in List View?  No one can edit this including admins, I have already implemented ACL and is working for me. I would like to know how we can use NoBody role ? Can anyone provide insignt on this role.

[Jaspal Singh]

Hi Vishal,

Did you check link that has details about base system roles? It states that 'Nobody' has a precedence over admins & personally never had a need to use it but should be used carefully as recommended.

[Vishal Savajia1]

Yes Please, I already read carefully about this link, but in my intance i can figure out few ACLs which have used this Role.

[Jaspal Singh]

Yes, in that case it would simply imply that neither System Admin nor maint user (OOB platform developer) will have access to this field once defined & thus should be used carefully as the impact would be longterm one.

[xiaix · Accepted solution]

Late to the party on this one, but here's how I was able to set the 'nobody' role for a list_edit ACL that I had:

Step 1: Create the ACL you want and add some role, doesn't matter what.

Step 2: Type in 'sys_security_acl_role.list' into your main filter navigator and hit Enter

Step 3: Find the ACL role record you created in step 1, you can filter as shown here.  Once you see the record, right-click on it and "Copy sys_id":

Step 4: Place the following code into a background script and run it. **NOTE** use the sys_id that you just copied and put it into the rec.get() and don't use mine... lol

Also, the "nobody" role sys_id should be the same across all instances.  If not, it's easy to find.

(function(){
	gs.getSession().setStrictQuery(true);
	var rec = new GlideRecord("sys_security_acl_role");
	rec.get("54c7e7a3dbf5e090d0065e98dc96198a"); /* sys_id of the sys_security_acl_role record you copied */
	if (rec){
		rec.sys_user_role = 'b05940500a0a0aa70090a4893f6ff35d'; /* nobody role */
		rec.update();
	}
})();

If you refresh that ACL record now, you should notice that you have a 'nobody' role: