Restrict INC based on some conditions

[Poorva Bhawsar]

Hi Community,

I just want to restrict INC record to a group and some users/groups added on a field.

I have 3 fields, one field is a checkbox, when this checkbox is checked, it will populate the other 2 fields for users/groups. These fields are only visible to a specific group.

My requirement is whenever that group check this checkbox and add some users/groups in the other 2 fields, that particular INC should be visible to them. For other groups it should be completely hidden.

Thanks in advance.

[Uncle Rob]

This looks like a combo of both ACL and before query business rule.

ACLs are simple enough, but other users may get a "security stopped you from viewing X records" warning.

BUT, and I can't understate this enough...

Before Query business rules are dangerous.  They're mostly invisible and teams tend to forget that they have them.  I would say if your ServiceNow team isn't used to creating and sustaining good documentation, they are not ready to make such a configuration.

But if you're committed to the documentation of the solution, and are ok with the risk of a feature that could prevent users from ever seeing certain incidents, then there's a good example of how to build them in the incident business rules.  Just search for before query.

[Poorva Bhawsar]

ACLs, i have already created and those are working perfectly fine.

Its just i am not able to work on the requirement where i need to show incidents to those users/groups who are added in users/groups fields of list type.

Also, i am not able to find before query business rule. Can you please provide me the sample code for this?

It would be really helpful for me.