- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-18-2025 12:28 AM
I have a requirement that only Problem Managers should be able to create problem tasks
I tried Controlling Through List Control giving Problem_manager role under New Role without omitting New Button
This is not working there is one OOB ACL - itil role required to create problem_task records
I have updated the role with Problem_manager by removing ITIL and problem_task _analyst then also i can see ITIL User is able to create problem tasks
Please assist me on this
@problemmgmt @Atul Gupta @itsm @ACL @LIst Control
Solved! Go to Solution.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-19-2025 06:28 AM
Hope you are doing good.
Did my reply answer your question?
If my response helped please mark it correct and close the thread so that it benefits future readers.
Ankur
✨ Certified Technical Architect || ✨ 9x ServiceNow MVP || ✨ ServiceNow Community Leader
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-18-2025 12:51 AM
does itil role contain that role?
If yes then it's because of that
which ACL is allowing the Create? did you check that using Access analyzer?
If my response helped please mark it correct and close the thread so that it benefits future readers.
Ankur
✨ Certified Technical Architect || ✨ 9x ServiceNow MVP || ✨ ServiceNow Community Leader
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-18-2025 01:00 AM
@Ankur Bawiskar yes problem manager is inheriting ITIL role. When i impersonate as ITIL User he is able to create tasks also checked same with Access analyzer
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-18-2025 01:25 AM
what's your concern?
Itil user is able to create and you don't want it? If yes then use script section and see if user has the exact role and not from inheritance
OR
create a group for Problem manager, Assign that role to your group, in advanced script check if logged in user is member of that group. This way you are not relying on role
answer = gs.getUser().isMemberOf('Group ABC');
If my response helped please mark it correct and close the thread so that it benefits future readers.
Ankur
✨ Certified Technical Architect || ✨ 9x ServiceNow MVP || ✨ ServiceNow Community Leader
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-18-2025 03:24 AM
Thank you for marking my response as helpful.
If my response helped please mark it correct and close the thread so that it benefits future readers.
Ankur
✨ Certified Technical Architect || ✨ 9x ServiceNow MVP || ✨ ServiceNow Community Leader
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-19-2025 06:28 AM
Hope you are doing good.
Did my reply answer your question?
If my response helped please mark it correct and close the thread so that it benefits future readers.
Ankur
✨ Certified Technical Architect || ✨ 9x ServiceNow MVP || ✨ ServiceNow Community Leader