Discovery Roles.

[Anupam Thomas]

Hi,
Is there a Discovery Role available/ or configurable in SNOW which only allows "read only" access to the user which means no creation, update or deletion should be allowed to this role. 

Please share available docs. related to this setup.

Thanks in advance. 

[Alikutty A]

Hi,

Are you talking about read only access on the CMDB CI? You can use the cmdb_read role for this purpose.

https://docs.servicenow.com/bundle/madrid-platform-administration/page/administer/roles/reference/r_BaseSystemRoles.html

Thanks!

[Anupam Thomas]

Hi Alikutty,
thank you for the reply, I had some info regarding the CMDB CI, so what I am looking for is I want a particular user to be able to view all the setup done for discovery(any setup like discovery schedule creation) in an instance but the user should not be able to make any changes from their end, eg: user can view the cmdb but not make any changes, or user can view the discovery schedule created but not add or update the schedule from their end.

Thank you 

[Sajilal]

Hi Anupam,

If you are asking for read only role to Discovery Application, then NO there is no OOB access as such. You will have to customize your ACLs and provide them with either any of the OOB read role to the ACL or your customized role.

Hope this helps!

Thanks,

Saji

[Anupam Thomas]

Hi Sajilal ,
thank you for the reply, I was browsing through the community when I came accross this information that we can provide "sync_read_only" access to a user whom we want to grant "read only" access,  then that user will not be able to create or update records in any table or application- is this role available? so what I am looking for is I want a particular user to be able to view all the setup done for discovery in an instance but the user should not be able to make any changes from their end.

Thank you.