Hi @ashish9 ,
Out of the box, the only users who can delete an Incident record must have either the "admin" or "itil_admin" role. If your normal "itil" users are able to see the Delete button in the form or are able to delete an Incident from list view, then a custom ACL was likely created that grants them the ability to delete. To limit anyone from being able to delete an Incident from any view, your best approach is to update the "delete" ACLs on the Incident table. I would recommend allowing your "admin" users to still be able to delete the records, but if you truly want to prevent anyone from deleting Incidents, then your delete ACLs should hard code in the "Script" field "answer = false;" (note: you must click the "Advanced" checkbox to see the Script field).
