What READ ACL entries are needed for the CI Relationships formatter?

[Mike Moody]

I'm attempting to explicitly grant visibility to the CI Relationships formatter, which is present on the CI form, to a custom role I've created. Granting READ access to the cmdb_rel_ci table, does not appear to be enough to achieve this. Using an out of box role is not an option in my use case, unless that role explicitly grants sole read-access to this formatter only. Does anyone know what additional tables require read access to make this work, or if it is possible? Thanks!

[Allen Andreas]

Hello,

I'm not so sure around the "cmdb_read does NOT count as a licensed role".

I would recommend consulting with your ServiceNow Acccount Executive first and foremost. Due to that role being contained within Admin and ITIL OOB, it may be packaged that way due to fulfiller needs aka license role.

https://docs.servicenow.com/bundle/madrid-platform-administration/page/administer/roles/reference/r_...

See link and search role: cmdb_read

Hunter, did you speak to your account representative or SN HI, etc. and were told that it was not a licensed role?

[hunter_phillips]

@Allen A true, better to be safe.

Based on this community post:
https://community.servicenow.com/community?id=community_question&sys_id=4e942d2edb85bb0414d6fb243996...

" I have asked the same thing since the role was given to users when we upgraded to Madrid. The reply that I received was this:

Please note that 'cmdb_read' role is a requestor role and does not require a license to use hence, there is no impact on your license.

This was from HI" 

I'm lead to believe that it is not, in fact, a licensed role. But I am not 100% certain.

[Allen Andreas]

Thanks for offering source.

It's best to double-check with SN Account Exec, but it looks promising that it may not be charged 🙂

[Allen Andreas]

Hi,

I just wanted to check-in on this. If my reply above helped guide you correctly, if you don't mind, please mark it as Helpful & Correct.

Thank you!

[Brian161]

The relations formatter uses the REST endpoints /now/cmdbrelation

You should give access to the ACL :

Type : REST_endpoint

Operation : execute

Name : /now/cmdbrelation

Hope this can help

Brian