User with Read only access

[prakharmahe]

Hi 

If someone has ITIL role and I add snc_read_only role with it, then the user cannnot create/update/delete any table data or is there any issue with this role?

Total role for this user - 52

itil
snc_read_only
sn_sow.it_agent_dashboard_user
dependency_views
knowledge
sn_bm_client.benchmark_data_viewer
sn_problem_write
sn_request_read
actsub_user
cmdb_ms_editor
snc_required_script_writer_permission
sn_cmdb_editor
sn_nb_action.next_best_action_user
template_editor
tracked_file_reader
interaction_agent
email_client_template_read
contact_user
sn_request_write
sn_gd_guidance.guidance_user
data_manager_user
sn_change_write
certification
cmdb_query_builder_read
sn_incident_write
sn_itsm_contact_query
cmdb_read
cmdb_ms_user
sn_comm_management.comm_plan_viewer
sn_sow.sow_home
task_editor
sn_sow.sow_list
sn_sow.sow_user
email_composer
sn_sttrm_condition_read
sn_publications_recipients_user
canvas_user
app_service_user
template_read_global
sn_cmdb_user
workspace_user
snc_platform_rest_api_access
sn_request_approver_read
view_changer
sn_problem_read
viz_creator
sn_change_read
sn_incident_read
agent_workspace_user
sn_publications_recipients_list_user
cmdb_query_builder
survey_reader

[prakharmahe]

@Ehab Pilloor @Tanushree Maiti 
I searched about it a little bit and there is one thing that 'it cannot bypass UI policy and business rules'
what does that mean and can it create any issue?

[Tanushree Maiti]

Hi @prakharmahe 

It means read-only restriction will take precedence over logic (with role) which you will define by BR or UI policy.

[prakharmahe]

@Tanushree Maiti 
can it create any issue? like the user will be able to edit anything?

[Tanushree Maiti]

As per my knowledge, Once user get snc_read_only , they wont be able to edit anything..

Test it once at your end.

[prakharmahe]

@Tanushree Maiti 
what you are saying is correct.
My only concern is that 'it cannot bypass the UI policy or business rule'

suppose in the system someone created a BR that allows everyone to edit the field then this user with read_only role can edit or not 
or 
some fields are hidden as per BR or UI policy will this user be able to see that as this is for audit purpose.

In this I'm confused