Regarding catalog item
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
a month ago
I created a catalog item and in user criteria, i have mentioned the department to which then catalog item should be visible. It is visible to the department members and also admins. Cant we restrict admins here?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
a month ago
Hi @shreya_3009
1) By default, ServiceNow admins override User Criteria. To prevent admins from bypassing your criteria, modify the system property glide.sc.entitlement.override to change the overriding role from admin to security_admin
Refer: https://www.servicenow.com/community/developer-forum/user-criteria-to-exclude-admins/m-p/1608714
Also check:
Regards
Tanushree Maiti
ServiceNow Technical Architect
LinkedIn: https://www.linkedin.com/in/tanushreemaiti
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
a month ago
Hi @shreya_3009
I think the big reason is why you would do such a thing?
If my answer has helped with your question, please mark my answer as the accepted solution and give a thumbs up.
Best regards
Anders
Rising star 2024
MVP 2025
linkedIn: https://www.linkedin.com/in/andersskovbjerg/
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
a month ago
Hello @shreya_3009 ,
Unless there's a strong compliance or security reason, I'd leave it as is it's standard ServiceNow behavior. If restriction is a hard requirement, go with the ACL approach (Read ACL on sc_cat_item with Admin overrides unchecked) rather than UI policies or client scripts, since those can be bypassed.
If my response helped mark as helpful and accept the solution.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
a month ago
Hello @shreya_3009 ,
Just change system property value to security_admin so admin will not override catalog item .
If this helps you then mark it as helpful and accept as solution.
Regards,
Aditya