what access or role required for change CI Class

[ayush_g]

I am from CMDB data Governance team and i need to find the  role or group responsible for CI class change 

please let me know the resolution soon as its going urgent

[Robbie]

Hi @ayush_g,

Access to fields is typically controlled by ACL's (Access Control Lists). These normally differ instance to instance, especially in the world of CMDB.

To give you an idea, in an OOB (Out Of Box) and baseline implementation, a user with the ITIL role has access to change the CI class field ('sys_class_name').

Your best bet to identify what been implemented in your instance, review the Security rules or 'ACLs' (if you have access).

Try using the below url noting you will need to change the instance name accordingly for your instance.

Failing that, you will need to speak to one of your sys admins or devs to confirm what access is required.

URL to paste into a browser:

https://your_instance_name.service-now.com/sys_security_acl_list.do?sysparm_query=name%3D*%5EORnameSTARTSWITH*.%5EORname%3Dcmdb_ci_app_server_java%5EORnameSTARTSWITHcmdb_ci_app_server_java.%5EORname%3Dcmdb_ci_app_server%5EORnameSTARTSWITHcmdb_ci_app_server.%5EORname%3Dcmdb_ci_appl%5EORnameSTARTSWITHcmdb_ci_appl.%5EORname%3Dcmdb_ci%5EORnameSTARTSWITHcmdb_ci.%5EORname%3Dcmdb%5EORnameSTARTSWITHcmdb.%5EORnameLIKEsys_class_name%5Eoperation%3Dwrite%5Ename%3Dcmdb_ci&sysparm_first_row=1&sysparm_view=

To help others (or for me to help you more directly), please mark this response correct by clicking on Accept as Solution and/or Kudos.


Thanks, Robbie

[ayush_g]

I have tried to check the ACL List and can not find the actual ACL is responsible for this.

[Robbie]

Hi @ayush_g,

If there is no specific ACL with 'sys_class_name' in the ACL name, it will default back the table ACLs (such as cmdb and more depending on how the instance has been configured).

In an OOB implementation, there are 3 ACLs against the cmdb table. How many do you see when using the previous supplied link?

To help others (or for me to help you more directly), please mark this response correct by clicking on Accept as Solution and/or Kudos.


Thanks, Robbie