Confidentiality Configuration is not working for Policy table

MuraliKChintha · ‎01-03-2024

Hi All,

I was trying out the Confidentiality configuration functionality in GRC. It is working for the OOB tables for which confidentiality is already configured(for the records that gets created when confidentiality property is enabled.). But when I try to create a new Confidentiality record for policies, the functionality is not working. I have created the 3 fields required for confidentiality.

Any help will be appreciated!

Thank you

MuraliKChintha · ‎01-04-2024

Hi @Hema Padala,

The first two points in your answer are correct but it requires additional configuration. Client scripts, Business rules and ACLs have to be created after creating a record in the Confidential configuration table.

Client scripts(reference): (these should be duplicated for the desired table)

https://<instance-name>.service-now.com/sys_script_client_list.do?sysparm_query=table%3Dsn_complianc...

Business rules:

https://<instance-name>.service-now.com/sys_script_list.do?sysparm_query=name%3DSet%20scratchpad%20values%5EORnameLIKEnotify%5Ecollection%3Dsn_compliance_policy_exception&sysparm_view=

ACLs:

A new table.none read ACL has to be created with the following script in the advanced section.
- Script: answer = (gs.hasRole('sn_grc.confidential_user') || ) && new sn_grc.GRCSecurityManager().canReadConfidentialRecord (current);
An extra condition has to be added in all the read ACLs:
- Condition: new sn_grc.GRCSecurityManager().shouldCheckExistingACL(current) && <existing ACL conditions>
An extra condition has to be added to the Delete ACLs
- Condition: current.canRead()

UI Actions:

All the UI actions should be updated with a condition
- Condition: current.canRead()

Notifications: (create a new Event for the notification)
https://<instance-name>.service-now.com/nav_to.do?uri=sysevent_email_action.do?sys_id=fb2f965bc7b330...

References:
https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1497382

View solution in original post

Community Alums · ‎01-04-2024

Hi @MuraliKChintha ,

Confidentiality Configuration is not Available for Policy.

MuraliKChintha · ‎01-04-2024

@Community Alums

I know it is not avaliable for policy table. But I figured the steps to configure it for policy table. Please refer to the accepted solution for this post

Community Alums · ‎01-04-2024

Hi @MuraliKChintha ,

Thanks for Sharing the Solution , however what i said in my answer is as per OOTB.

Policy should not be confidential as it's supposed to be adhered by the users to be compliant as per Organization norms.

You can do many things in ServiceNow to make things bend as per the requirement and what you shared is customization.