REST API incident table access - minimum roles required

Panagiotis Kons
Tera Expert

Hello,

I am trying to access an incident, via the REST table API, in the following URL:

 

https://myinstance.service-now.com/api/now/table/incident/28a1975737be8a00375570f543990444

 

I have created a new user and given the "rest_api_explorer" and "rest_service" roles. However when I try to access the record I get the error

 

"Record doesn't exist or ACL restricts the record retrieval".

 

If I give the user the role "admin" then everything works fine, the record comes up. However I feel like it's too much to give the user the role "admin" just for accessing the incidents table. Does anyone know the minimum role(s) I need to grand to my user in order to be able to access tables in ServiceNow?

 

Thank you

 

 

1 ACCEPTED SOLUTION

Allen Andreas
Administrator
Administrator

Hi,

Per the out of box ACLs, the access is determined by who opened it, is the caller, etc.

In your case, you may also need to give the itil role for the credentials to have appropriate read access to all incidents.

Please mark reply as Helpful/Accepted, if applicable. Thanks!


Please consider marking my reply as Helpful and/or Accept Solution, if applicable. Thanks!

View solution in original post

4 REPLIES 4

Mark Guldhammer
Giga Guru

Hi

 

I these situations, I always resort to the Debug Security feature. Then you can se which checks are failing in the bottom of the page, when you impersonate the user.

 

Br. 

Mark

 

Johns Marokky
Tera Guru

Hi @Panagiotis Kons ,

Please try giving the user 'itil' role and see if its working.

 

Regards,

Johns

Allen Andreas
Administrator
Administrator

Hi,

Per the out of box ACLs, the access is determined by who opened it, is the caller, etc.

In your case, you may also need to give the itil role for the credentials to have appropriate read access to all incidents.

Please mark reply as Helpful/Accepted, if applicable. Thanks!


Please consider marking my reply as Helpful and/or Accept Solution, if applicable. Thanks!

Hello Allen,

 

I have already tried with the itl role, didn't work.

 

Any more suggestions?

 

Thank you