HR Case Attachment Visibility Issue
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-18-2025 03:34 AM
Hello Everyone,
We encountered an issue where attachments added during HR case creation are visible to the admin, but not visible to users with the sn_hr_core.basic role.
Like in Below SS it is coming :
After comparing the DEV and PROD environments, we confirmed that this issue only exists in PROD.
Upon investigation, we found that an ACL (Access Control Rule) is missing in PROD:
ACL Name: sn_hr_ef_attachment_tracking
To create this ACL, it needs to be created under the following scope:
Scope: Employee Document Management - Human Resources
Plugin ID: com.sn_employee_document_management
However, this plugin is also not available in PROD, which prevents us from creating the ACL in the required scope.
I would like to understand whether this ACL (sn_hr_ef_attachment_tracking) can impact the visibility of attachments based on user roles, or if there might be other underlying issues that need to be addressed.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-18-2025 03:40 AM
I don't think that ACL is the issue.
There is something else.
Where is the attachment not visible? on HR case record in native?
If my response helped please mark it correct and close the thread so that it benefits future readers.
Ankur
✨ Certified Technical Architect || ✨ 9x ServiceNow MVP || ✨ ServiceNow Community Leader
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-18-2025 03:43 AM - edited 07-18-2025 03:43 AM
On HR AGENT WORKSPACE , Activity section that attachment is not available for user having sn_hr_core.basic role.
But the user with admin role , are able to see the same.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-18-2025 03:45 AM
Did you debug using access analyzer which ACL is blocking?
You can create another table level READ ACL on sys_attachment with that basic role and test and then migrate the code to UAT, PROD.
If my response helped please mark it correct and close the thread so that it benefits future readers.
Ankur
✨ Certified Technical Architect || ✨ 9x ServiceNow MVP || ✨ ServiceNow Community Leader
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-18-2025 03:43 AM
Hi,
you can create an ACL with same conditions and roles in Prod, in Human Resource core scope, it should work.