Prevent an admin from specific deletions in background script

[Anton42]

Hello,

is it possible to prevent background script deletion of only a specific table like sys_user for admin users?

So, for example:

We want to prevent, that users with admin role cannot execute deletion on the sys_user table.

Thank you in advance.

[Anton42]

That would block the whole background script execution which will be too much. We just want to prevent them from executing deletions on a specific table.

Anyways, I am wondering what the difference is between this property and the new "scripting governance" function....

[yashkamde]

Hello @Anton42 ,

As per my understanding, you cannot technically prevent background scripts from deleting sys_user(or any custom table) records while still allowing admins to run other background scripts. The workaround is to restrict background script access altogether, or enforce a business rule that blocks deletions on sys_user regardless of execution context.

If my response helped mark as helpful and accept the solution.

[Anton42]

Hello. So our current solution is really to block for these certain admin users the background script execution completely.

The last idea we have and will test in some weeks is the protection via flows in a scope instead of protection via business rules because it seems that you cannot bypass flow executions in background scripts with setworkflow false.