Manage who can attach files on a record/ci
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎06-13-2016 05:11 AM
Hi,
Is it possible to restrict what roles are able to add attachments to a record/ci ?
For instance, on Business Service i only want the System Owner to be able to add attachments.

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎06-13-2016 05:15 AM
Hi Anders,
Yes, you can control this globally or at the table level. This should be helpful.
Administering Attachments - ServiceNow Wiki

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎05-23-2024 09:39 AM
But Chuck,
I want only the "ITIL" user to upload an attachment, not even a "System-Admin" should be able to.
but when I mentioned only "ITIL" in the "List of roles (comma-separated) "; To my surprise it is allowing the "System-Admin" also to attach attachments, which i don't want & restrict.
Is it possible in first place?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎06-13-2016 05:24 AM
To restrict who can upload attachments:
- Navigate to System Properties > Security.
- In the Attachment limits and behavior section, locate the List of roles (comma-separated) that can create attachments: property (glide.attachment.role).
- Enter one or more roles separated by commas.
- Only roles listed in this property are able to upload attachments to a record. If no roles are entered, then all roles can upload attachments to ServiceNow forms.
- Click Save.
Thanks
Akash Sharma
PS Hit like correct if helps
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎06-13-2016 05:27 AM
Hi again,
Yes i read the documentation but it seems like this is system wide settings?
I dont want to restrict who can attach attachments on for instance incident records. For now i only want to restrict attachments on cmdb_ci table and a few applications i've created myself.
Might be able to restrict it on sys_attachments create/delete ACL with some conditions ?