ITIL user proof of concept with limited functionality.

[tomaslindev]

Hello everyone,
I have a role in which the user should only be able to see requests and incidents from their group. Neither the knowledge base, CMDB, nor open or view change management or navigate through the technical view to search for CMDB type information or tickets. Is there already a role with these limitations or a cash register ACL that meets these requirements?
Many thanks in advance and best regards.

[Dr Atul G- LNG]

Hi @tomaslindev 

You just give the module specific role like Incident_write/read. in that case user can access only this module. 

[Mark Manders · Accepted solution]

You will need to create your own, because nothing OOB exists for this. The deny unless ACL in Xanadu can help a lot and if you aren't yet on Xanadu, you will have to create some allow ACLs. Security attributes provide the possibility to check on group membership.