HR Inbound Email Actions allow access to users not in the proper HR service group.

[KKrabbenhoft]

The use case:
We are using COE security policies to restrict access to HR Groups. 

Example:

If COE is HR Case (sn_hr_core)
Applies to All is checked. 
conditions are HR Service [is] Benefits. 
Groups with access= to HR Benefits. 
However, when an inbound email is sent for Create HR Case, Users in other HR groups can see these records even when they are not in the HR Benefits group.

[SANDEEP28]

@KKrabbenhoft 

1) If you want to restrict cases of particular  HR Service of COE then you don't have to select "Applies to all services" checkbox. You should select that HR service in "Services" field as below.

2) Is COE of HR Service "Benefits" is HR case ?? If you go with point1 which I mentioned above the you will be able to select only those services which are part of that COE. 

3) I tried it for "General Inquiry" HR service of HR case COE and it worked perfectly fine. HR Tier 1 group member is able to see the ticket & HR Tier 2 group member is not able to see the ticket.

If I could help you with your Query then, please hit the Thumb Icon and mark as Correct !! 

[Ravi Chandra_K]

Hello @KKrabbenhoft 

Greetings!

Is this not working only incase of inbound email cases. have you checked for the cases normally created.

make sure that correct COE table is selected. and as Sandeep mentioned, applies to all services check box should be unchecked.

please mark the answer as helpful if helped.

Kind Regards,

Ravi Chandra.