Manager of a group with HR Admin role is unable to add users to group.

Akhila8 · ‎12-18-2019

After NewYork Upgrade, Manage of a group with sn_hr_core.admin role is unable to add users to group, He is able to go into Group, click on EDIT, select users and then save. But the system is actually throwing a message as below.

Gone throw https://community.servicenow.com/community?id=community_question&sys_id=5355ec42dba8fb405ed4a851ca96... but in roles table, Assignable BY is also present as sn_hr_core.admin.

This worked fine in Madrid. Earlier in Kinston or so this Issue was identified but now unsure of the Fix now.

Any small Info would help!!

Akhila8 · ‎01-24-2020

The PRB: PRB1358656 is fixed in Orlando and New York Patch 6 releases

Temporary workaround given by Service now :

Solution Proposed:

There is already a problem record: PRB1358656 for the issue which is under 'Testing' state.
As a workaround, you can add 'sn_esign.admin' or 'sn_hr_core.admin' to the 'Assignable by' field of the role: 'sn_esign.admin' .

View solution in original post

michaelj_sherid · ‎12-18-2019

I would recommend to open a Hi Issue. OOB base install of NY, I cannot replicate this. Support will be able to dig further.

Ashutosh Munot1 · ‎12-18-2019

Hi,

Can you check if you are adding it when you have security rights elevated?

Also check this ACL

Thanks,
Ashutosh

Akhila8 · ‎12-18-2019

Yes this is present.

Michael Ritchie · ‎12-18-2019

I agree with @michaelj.sheridan I just tried to reproduce this in my NY Personal Developer Instance using your instructions above and I am not able to reproduce the error. My test user is able to edit group membership just fine. I suspect you may have custom ACLs affecting it. I would engage customer support or debug security rules.

Akhila8 · ‎12-18-2019

Thanks for the reply. Even I am unable to get replicate in OOB, but no new security rules has been added in our instance but after NY only we are experiencing this Issue. Unsure how to debug deep enough. I guess HI would be the solution.