Manage who can attach files on a record/ci

andersn
Giga Contributor

Hi,

Is it possible to restrict what roles are able to add attachments to a record/ci ?

For instance, on Business Service i only want the System Owner to be able to add attachments.

8 REPLIES 8

Chuck Tomasi
Tera Patron

Hi Anders,



Yes, you can control this globally or at the table level. This should be helpful.



Administering Attachments - ServiceNow Wiki


But Chuck,
I want only the "ITIL" user to upload an attachment, not even a "System-Admin" should be able to.
but when I mentioned only "ITIL" in the "List of roles (comma-separated) "; To my surprise it is allowing the "System-Admin" also to attach attachments, which i don't want & restrict.
Is it possible in first place?

akashsrm100
Kilo Guru

To restrict who can upload attachments:


  1. Navigate to System Properties > Security.
  2. In the Attachment limits and behavior section, locate the List of roles (comma-separated) that can create attachments: property (glide.attachment.role).
  3. Enter one or more roles separated by commas.
    Only roles listed in this property are able to upload attachments to a record. If no roles are entered, then all roles can upload attachments to ServiceNow forms.
  4. Click Save.

Thanks


Akash Sharma



PS Hit like correct if helps


Hi again,



Yes i read the documentation but it seems like this is system wide settings?



I dont want to restrict who can attach attachments on for instance incident records. For now i only want to restrict attachments on cmdb_ci table and a few applications i've created myself.



Might be able to restrict it on sys_attachments create/delete ACL with some conditions ?