Limiting Read Access Based on Location

maxstnr
Tera Contributor

Hello! I am new to ServiceNow and am wondering the best method to achieve this scenario.  

We’re exploring restricting read access of HR cases based on the location of the submitted user for some of our HR non-agent teams. So if User A lives in Town A, and submits a case, then the members of the HR non-agent team with location Town A can view the case (in addition to the COE team responsible for working the case). 

I tried testing this with COE policies in my personal instance by creating some groups for the HR non-agent teams and specifying specific location, but am wondering is there a simpler method to this? 

1 ACCEPTED SOLUTION

Its_Azar
Tera Guru

Hi there @maxstnr 

 

i guess you can utilize Access Control Rules (ACRs) along with other related configurations. 

 

start with configuring Location Field make surethat there is a location field on the HR case record that captures the location of the submitted user. 

then create user groups corresponding to each location (e.g., Town A). Assign HR non-agent team members to their respective location-based groups.

now finally define ACRs to restrict read access to HR cases based on the location field. For each location, create an ACR that grants read access to the corresponding location-based user group. 

 

If this helps kindly accept the response thanks much.

Regards

 

☑️ If this helped, please mark it as Helpful or Accept Solution so others can find the answer too.




Kind Regards,

Mohamed Azarudeen Z

Developer @ KPMG

 Microsoft MVP (AI Services), India

View solution in original post

2 REPLIES 2

Its_Azar
Tera Guru

Hi there @maxstnr 

 

i guess you can utilize Access Control Rules (ACRs) along with other related configurations. 

 

start with configuring Location Field make surethat there is a location field on the HR case record that captures the location of the submitted user. 

then create user groups corresponding to each location (e.g., Town A). Assign HR non-agent team members to their respective location-based groups.

now finally define ACRs to restrict read access to HR cases based on the location field. For each location, create an ACR that grants read access to the corresponding location-based user group. 

 

If this helps kindly accept the response thanks much.

Regards

 

☑️ If this helped, please mark it as Helpful or Accept Solution so others can find the answer too.




Kind Regards,

Mohamed Azarudeen Z

Developer @ KPMG

 Microsoft MVP (AI Services), India

maxstnr
Tera Contributor

Thank you! We ultimately ended up going a different route but this explanation helps for future reference