Restricting task table

[Benjie Bagayna]

Hi community,

I've tried a 3rd party tool that has an endpoint of /api/now/table/task

As far as I know the task table is a parent table of incident, case, change, problem since the external users can access the case table to get their cases through the task table using a 3rd party tool do we need to restrict their access to it or not?

[Shruti Khaire · Accepted solution]

Hello @Benjie Bagayna,

The restriction totally depends on the roles that have been provided to the external users. You can have REST API access policy if needed to just prevent the base table from unneccessary modification. Below i'll provide the documentation link for the same in case if you want to check it out also you can create ACL for the same as required. 

Provide external users access to a table

Create REST API access policy

Thank you!