Only allow admins to delete user records

[Philip Conforzi]

Hello ServiceNow Community,

I hope you're doing well!

I am currently trying to create an ACL rule that only allows users with the Admin role to delete records from the sys_user table. Additionally, I only want users with the admin role to delete records from the sys-user table is that record is no longer active.

I'm having issues getting this to fire properly. Will this require any additional scripting? Is there an ACL that is conflicting with this?

I've attached the image of my solution below.

Let me know your thoughts!

[Dr Atul G- LNG]

Hi @Philip Conforzi 

Try Active = False , instead of Active is not True.

[Dr Atul G- LNG]

Also , OOTB only admin can delete or user with user_admin role can delete user. 

[Philip Conforzi]

Hey Atul,

Question on this. Is there a way to restrict users with the user_admin role from deleting recors in the sys_user table? Or is it a default ability of the role like it is for admin?

Let me know,

Thanks!

[Dr Atul G- LNG]

Hi @Philip Conforzi 

It's OOTB but if you want to restrict you need to create ACL as suggested by @Shivambitanwar1