How to hide HR services to certain groups

[geannaweed]

How to hide HR services to certain groups but some members can have multiple groups which should also see all HR services.

15 groups = only 4 hr services should be visible

some members of these 15 groups are also members of another group let's say 'Leader HR group' and should still see all HR services not only the 4

[Ankur Bawiskar]

@geannaweed 

you can have query BR on HR Service table and check group membership and handle it

what did you start?

[ge3]

The BR would show the cases to the groups selected only. But there could be tons of members for each group that are part of other groups too who should see all other HR services. Not sure how to achieve that, how to script to validate whether user is a part of this group I am restricting other cases while checking as well if they are also members of the higher HR groups who can access all cases and still give them visbility

[Susan Britt]

Are you wanting the groups to not be able to see the cases created for their services? The OOB way to accomplish this would be to create COE Security to override the default security of any HR group can see any HR Case. You essentially create the COE security records and define what groups can see what COE table and/or services. The excluded groups will not see them, so it’ll take care of someone being in multiple groups.

[Nilesh Wahule]

Hi @geannaweed ,

I assume when you are talking about hiding HR services it clearly means you want to hide the service while creating a case from backend/agent workspace or a catalog item associated with respective HR service. 

If Yes, can be achieved using following,

1.        Backend/Agent workspace : You can create a groups as you mentioned, ABC group with members a, b, c, d and others. XYZ group with members a,b,c,d and rest different than group ABC. 
   after you can create HR Criteria with these groups individually and apply that to respective HR services. This will restrict the HR case creation for those users.
2.      Service Portal / catalog Item : Convert the HR criteria's created above into the user criteria as well and apply to the respective record producers.

if No, and you want to hide HR cases, you can use OOTB COE Security configurations with each service separately, let me knw if you need more clarity on that.

Please mark this as correct answer and helpful if this resolves your query. 

----
Nilesh Wahule