Restrict update of sys_user record from users with ITIL role

Kartikey_05
Tera Contributor

Hi Everyone,

my requirement is to restrict the update of sys_user record for users of a certain group (the users of these group cannot write on a user record) Threre were two field level ACL's i came across (please see attached image)

ACL 1:
ACL_1.png

ACL 2:
ACL2.png

When i made changes in the script of the second ACL, it works fine for other field level ACL on sys_user table
but since there are two ACL for this field , the ACL 1 is overriding this and granting write access to users with ITIL role.

How do i restrict the write access of users from a particular group even if they have ITIL role?