Restrict Service Desk from creating change requests

[curr_user]

The members of the assignment group Service Desk have the following restrictions configured:

• Unable to Create New from All > Changes > Create new (make the fields of the form read only so that service desk member cannot enter values and cannot save/submit the form)
• Read only access to all Change Requests (existing ones, All > Changes > All)
• Unable to raise a Change from an Incident record 
• Unable to raise a Change from Service Operations Workspace 
• Unable to raise a Change from an Incident record in Service Operations Workspace

Any guidance or assistance is greatly appreciated.
Thank you in advance!

[Dr Atul G- LNG · Accepted solution]

Hi @curr_user 

So now the 

• Read only access to all Change Requests (existing ones, All > Changes > All)

If you dont want to play with role, then 2 options

1- BR

2 ACL

ACL is one of the best options where you can create an ACL on the change table and mention the group name.

https://www.servicenow.com/community/developer-forum/need-to-make-all-the-fields-on-a-form-read-only...

https://www.servicenow.com/community/developer-blog/how-to-make-a-field-read-only-using-acl/ba-p/278...