Restrict ESC Portal Access Only to Users with Existing HR Profile

[Geetanjali14]

Hello all,

Currently, any active user in our instance can access the ESC Portal.

Our requirement is to restrict access so that only active users who already have a valid HR Profile can access the ESC Portal.

However, we observed that when a user accesses the ESC Portal, an HR Profile gets created automatically for that user. Because of this behavior, even users without a pre-existing HR Profile are able to access the portal.

Questions:

1. How can we restrict ESC Portal access so that only users with an existing HR Profile can access it?

2. Is there a way to prevent automatic HR Profile creation when a user accesses the ESC Portal?

3. What is the recommended approach (ACL, User Criteria, Scripted check, etc.) to enforce this requirement?

Any guidance or best practices would be appreciated.

Thanks in advance!

@Ankur Bawiskar @Dr Atul G- LNG 

[Ankur Bawiskar]

@Geetanjali14 

this property handles the auto-creation logic

"sn_hr_core.esc.create_hrprofile.override" -> should be false

HR Profiles are being automatically generated when users navigate to the ESC portal for the first ti... 

For other part

You can use Login script and UI script combination to enforce using ESC portal

you should handle this by updating the SPEntryPage script include

check this link on how to do

Role based redirection with SPEntryPage 

In case user directly enters something in URL you can always use custom UI script and Ajax to inform them and redirect them to ESC portal automatically.

for that check this

Solution: Redirecting Users to the CSM Portal Based on Roles in ServiceNow

💡 If my response helped, please mark it as correct ✅ and close the thread 🔒— this helps future readers find the solution faster! 🙏