@Chaiatnya In COE security policies, you can only restrict using assignment group. Its not possible to restrict for submitted user or assigned to user.
If you want to show confidential cases to submitted person (Opened by) on ESC portal then you need to change the script or add more filter in below My request filter record
javascript:sn_hr_core.hr_caseOpenRequestFilterUtil() --> you need to alter this script
If you want restrict for assigned to user then you need to go ACL's.
If I could help you with your Query then, please hit the Thumb Icon and mark as Correct !!
Hi, based on my understanding of your question from the information you’ve provided, you could potentially try the following.
In ServiceNow HR Service Delivery (HRSD), you can use COE (Center of Excellence) security policies to control access to confidential cases based on specific conditions, such as allowing access to the submitted user and the assigned user but not to the assignment group. Here's a step-by-step guide on how to achieve this:
1. Access Security Policies:
Log in to your ServiceNow instance as an administrator or a user with appropriate permissions.
Go to "System Security" > "Security Policies."
2. Create a New COE Security Policy:
Click on "New" to create a new security policy.
3. Define the Policy Conditions:
Give your security policy a meaningful name and a short description.
In the "Conditions" section, define the conditions under which this policy should apply. You'll want to specify the conditions that match confidential cases assigned only to the submitted user and assigned user, but not the assignment group. Here's an example condition:
Here's an example of how your script action might look (assuming you have a translation function):
This condition checks if the case is in a "confidential" state, has no assignment group, and is assigned to the currently logged-in user.
4. Define the Policy Actions:
In the "Actions" section, specify what actions should be taken when the conditions are met. You want to allow access to confidential cases for the specified users.
Select the "Read" action and set it to "Allow."
5. Define the Policy Roles:
In the "Roles" section, add the roles that should be subject to this security policy. Typically, you would add the "hr_case" or a similar role that is assigned to HR users who handle HR cases.
6. Activate the Security Policy:
Save the security policy and make sure it's active.
Now, the COE security policy is set up to allow access to confidential cases for HR users who match the defined conditions (i.e., cases assigned to the submitted user and assigned user but not the assignment group). This policy will ensure that only the intended users have access to these confidential cases.
Please make sure to thoroughly test this security policy in a non-production environment to ensure it meets your specific requirements and does not inadvertently grant access to unauthorized users.
Security policies are critical for maintaining data privacy and access control in ServiceNow, so careful configuration is essential.
Good Luck!
James @Ecostratus
If I helped you with your question, then please hit the Thumb Icon and mark it as Helpful or Correct.
