User Criteria Issue

[KrushnakumaT]

We’ve created a Knowledge Base (KB) in ServiceNow and configured it so that only users from a specific group can read and contribute. Internal users and ITIL users are correctly restricted and cannot access the KB, which is expected. However, we’ve noticed that admin users are still able to view the KB, even though they’re not part of the allowed group. How can we restrict access for these admin users as well? I’ve tried using User Criteria with scripts, but it didn’t work as intended. Any suggestions, script examples, or alternative approaches to enforce this restriction are welcome. Thanks in advance!

[kaushal_snow]

@KrushnakumaT ,

You can restrict a knowledge base to only a specific group by setting a User Criteria on the Can Read tab of the KB and verifying the system property glide.knowman.block_access_with_no_user_criteria is enabled so that no one else automatically inherits access, but because admin level roles like admin or knowledge_admin typically bypass User Criteria you should complement this with a custom Read ACL on the kb_knowledge_base (and possibly kb_knowledge) table that explicitly denies those roles unless they’re in the allowed group......

If you found my response helpful, please mark it as ‘Accept as Solution’ and ‘Helpful’. This helps other community members find the right answer more easily and supports the community.