Need to provide access to a catalog item for an external user and restrict rest of portal access

[Sai1911]

1. We need to provide access to a particular catalog item in service now for an external user who's from other domain.

2. And at the same we are trying to restrict the rest of the portal access for the external user.

3. In brief we are providing a service catalog url to external user where the user able to login and fill the form, when he try to click on the home button any other links specified in the portal it should through an 404 error for the rest of the portal.

[John Gilmore]

@Sai1911 - So ideally the first thing you would need is a public facing portal. This is critical because it natively uses the functionality of roles such as snc_external or the public user_criteria. Without the public facing portal then the amount of configuration required to show them only one thing in an internal portal would mean creating a role and blocking access to all other catalog items for that user that would normally be available to anyone in that portal. Within the public portal you could then setup a user_criteria to restrict access by something like the Company attribute of the users in order to limit who sees it. If your organization has been using a public portal prior to this then the user shouldn't be seeing anything that you woulnd't normally want them to and would additionally see this catalog item.

I believe that to achieve this outcome if you don't have an established public portal already is really dependent on your existing portal configuration. If it hasn't been public and isn't properly configured to hide things from snc_external or a user role that only these external users are in, then you would need to update everything you want hidden from the user to add the appropriate security policies to block that access. Generally best practice is that internal facing portals by default are blocked from even being viewed by the snc_external role or "public" users. There isn't an easy way around that other than effectively transitioning the portal to a public one and retroactively applying all the security rules that would go along with that to hide everything else.

[Sai1911]

Hello guys,

I have used this UI script where portal is getting restricted for external user at the same time catalog item view also getting empty 

(function() {

    if (typeof g_user !== 'undefined' && g_user.hasRole('external_user')) {

        const pathname = window.location.pathname;

        const searchParams = new URLSearchParams(window.location.search);

        const allowedCatalogItems = [

            'cb7442971b7335502fdaa9ffe54bcb53', // catalog sys id

        ];

       if (searchParams.get('id') === 'access_denied') return;

        if (

            searchParams.get('id') === 'sc_cat_item' &&

            allowedCatalogItems.includes(searchParams.get('sys_id'))

        ) {

            return;

        }

        window.location.href = '/sp?id=access_denied';

    }

})();

Can you pls suggest me any changes if required.

Attached screenshots for reference.