Restrict closing an inc with role

[James_9]

Hello

I want to restrict, only the users with role ABC should close the ticket. Users without that role shouldn't be able to close the ticket. How can this be acheived?

[Community Alums · Accepted solution]

Hi @James_9 ,

There are situations where an incidents with specific assignment group(s) to restrict visibility only to it group members. Though this can be achieved using read ACLs, but it may force restricted users to get access through other read ACLs or OOB readACLs on that table.

Since it is not suggested to disable other ACLs, we can restrict incidents of specific group from visibility via before-query business rule

Resolution

Steps to Perform

1. Create a Before -Query Business rule on 'Incident' table
2. In the Advanced tab, set the condition as:

   !gs.getUser().isMemberOf('<group name to be restricted for other users>') 

3. In the script field, update sys_id of the group to be restricted

(function executeRule(current, previous /*null when async*/ ) {
var grp = current.addNullQuery('assignment_group').addOrCondition('assignment_group','!=','<sys_id of the group to be restricted for other users>');
})(current, previous);

This Before-Query Business rules restrict the incidents assigned to the specific group visible only to those group members