Restricting attachments for 'internal use only'

[Matt93]

Hi,

Is there any way to restrict HR Case attachments for 'internal use only'?

A use case would be when sensitive documentation is getting passed back and forth via the email client between business teams that should not be viewed/seen by the Opened For employee via the Employee Center. Right now there is no OOB way to prevent the Opened For from seeing all attachments being appended to any given HR Case. 

Note: We've explored encryption contexts, but that does not account for incoming attachments. 

If anyone has solved for this? I am thinking about exploring cresting new Case Options for the HR Service configuration, but that comes with its own set of challenges with ACLs and other conditional attachment security.

Cheers,

Matt

[Community Alums · Accepted solution]

Hi Matt,

This article should help you :

https://community.servicenow.com/community?id=community_blog&sys_id=6f169e241b575490d2ccea89bd4bcbb0

Mark my answer correct & Helpful, if Applicable.

Thanks,

Sandeep

[Community Alums]

Hi Matt,

Any update to this ?Any follow-up required? if not

Kindly mark the answer as Correct & Helpful both such that others can get help.

Thanks,
Sandeep

[Matt93]

Thanks, @Sandeep Dutta! Exactly what we are looking for 🙂