service catalog masked variables questions (data validation and Multi-row variable sets)

[stevemac]

Hi

Have a requirement to mask some customer email addresses on a catalog item variable.   Got that working without any dramas, but now have some questions / needing some assistance on improving the data quality

Question 1: how to perform data entry validation on a masked variable as no longer have option to select regex

• guess an option is to provide a field that has the validation and then copy it into the masked variable and then remove from the in the clear variable
• Any other recommended options?

Question 2: a masked variable in a MRVS cannot have a read role applied.  Have not found doco on this, but anyone know a way around this and / or any plans for ServiceNow to change the behavior?

thanks,

Steve

[jcmings]

I've never used a masked variable, but I'm wondering if you can use a Catalog Client Script to perform your data validation. Have you attempted that?

As for your second question, it looks like once the catalog item is submitted, users with the catalog_view_masked role can view the data. Source: https://www.servicenow.com/docs/bundle/yokohama-servicenow-platform/page/product/service-catalog-man...

[stevemac]

yes - users with "catalog_view_masked" can view the result.  You can also create custom role(s) and include in the Read roles on the masked variable definition.   This is great to control which team members can read different types of sensitive data, but is unfortunately not available in MRVS

Thanks for the reminder on client script validation.  Will test as unsure if have immediate access to the unmasked values

[Ankur Bawiskar]

@stevemac 

this link has the approach

Why can't I validate input on a masked variable type? 

If my response helped please mark it correct and close the thread so that it benefits future readers.