Users with ITIL role cannot see the incidents assigned to them.

AdityaK
Tera Contributor

Hi, I am practicing on my PDI. I recently upgraded my PDI from the Vancouver version to the Washington DC version.

As an admin, I created an incident and assigned it to a user with ITIL role. When I impersonated that user and checked for the Incidents assigned to me, it is showing 'Security constraints are stopping you from viewing this page'.

Why is this happening?

3 ACCEPTED SOLUTIONS

ShubhamGarg
Kilo Sage

Hello @AdityaK ,

Can you check & validate "incident query" query Business Rule (QBR)? This is out of box restriction who can view incidents records and who cannot. This will give you a clarity why you are not able to access incident and which roles & group membership is needed to view incident.

 

If this does not help, you can check access privileges for a given resource using Access Analyzer . It will show where exactly it is granting or blocking access (All ACLs & Query BR info. related to given resource - record/table, etc.)

Application Navigator -> Access Analyzer -> Analyze Permissions.

If it is not already installed, you can go to plugins and install it. It is free of cost and there are no special roles required to install it. Neither it has an impact on instance if you install it.

 

If my response helps you in any way, kindly mark it as Accepted Solution/Helpful and help in closing this thread.

Regards,

Shubham

View solution in original post

AndersBGS
Tera Patron
Tera Patron

Hi @AdityaK ,

 

I would also advise to utilize access analyzer, as this will give you a view on view the impersonated user can’t see the incident.

if my answer has helped with your question, please mark my answer as accepted solution and give a thumb up.

 

Best regards

 anders

If my answer has helped with your question, please mark my answer as the accepted solution and give a thumbs up.

Best regards
Anders

Rising star 2024
MVP 2025
linkedIn: https://www.linkedin.com/in/andersskovbjerg/

View solution in original post

6 REPLIES 6

ShubhamGarg
Kilo Sage

Hello @AdityaK ,

Can you check & validate "incident query" query Business Rule (QBR)? This is out of box restriction who can view incidents records and who cannot. This will give you a clarity why you are not able to access incident and which roles & group membership is needed to view incident.

 

If this does not help, you can check access privileges for a given resource using Access Analyzer . It will show where exactly it is granting or blocking access (All ACLs & Query BR info. related to given resource - record/table, etc.)

Application Navigator -> Access Analyzer -> Analyze Permissions.

If it is not already installed, you can go to plugins and install it. It is free of cost and there are no special roles required to install it. Neither it has an impact on instance if you install it.

 

If my response helps you in any way, kindly mark it as Accepted Solution/Helpful and help in closing this thread.

Regards,

Shubham

Thank you Shubham, Access Analyzer helped.

SK Chand Basha
Tera Sage
Tera Sage

Hi @AdityaK 

 

Utilize Access Analyzer to get a clear picture of what's restricted.

 

https://www.servicenow.com/community/platform-privacy-security-blog/vancouver-release-customers-gain...

Hello SK Chand Basha, Access Analyzer Helped.