How to grant access to CMDB Query results to other fulfillers

[The SN Nerd]

Hey Community,

I've recently started playing around with CMDB Query Builder to build a report of Business Applications and their downstream relations. I've finally got the results I want and have built a report.

It would appear that the query results are restricted to the author of the CMDB Query, and this is reflected in the ACLs for the base table cmdb_qb_result_base.
I want to share the report I've created with the requestor and others so they can add fields as required. The requestor has the required roles but fails the ACL script, as they are not the 'created by' user.

Is this really by design?

Short of customizing the ACLs, is there a configuration mechanism to share the results in the tool with other licensed users? 

The Product Documentation also makes mention of creating CMDB Groups and relating Queries there, but I don't understand how that is supposed to work and is not referenced in the ACLs.

Regards,

Paul

[Vivektietsood]

I have not come across any OOB mechanism to share the results. Queries mentioned in the CMDB group section allude to queries related to the group for example some groups may want to see network classes versus computer class. 

I think custom ACL is the only solution here. 

Please mark helpful or accept solution so that it helps others with a similar question. 

[Vivektietsood]

Hey Paul. 

I researched it a little more. I think you can schedule a report to be sent out to the individuals or the groups you want:

Schedule a saved CMDB query to run once at a scheduled time or on a recurring schedule, and to email the query results to specified users.

Before you begin

The UI16 plugin (com.glide.ui.ui16) must be activated and a saved CMDB query that was built in the CMDB Query Builder must exist.

Role required: cmdb_query_builder (contained for itil and asset)

About this task

The query results are attached to the email as a file in the specified format. By default, the maximum result rows that can be attached is 10,000. This is controlled by a system property.

Procedure

1. If need to, navigate to Configuration, click CMDB Query Builder, and then click a saved query.
2. Click Create Schedule and fill out the form.

   Scheduled Email of Query Builder form

   Field	Description
   Query	The query to run.
   Users	Users who should receive query results email. To receive emails, users must have an Email address defined and have Notifications set to Enable in their user records.
   Groups	Groups to email the query results to.
   Zip output	Indicates whether the report should be sent as a zip file.
   Active	Indicates whether to run the query according to the specified schedule.
   Run	Frequency for running the query.
   Time	Time of day to run the query.
   Conditional	Indicates whether to display the Condition field, which allows you to specify conditions under which the query runs.
   Omit if not records	Indicate whether to distribute email if the query returns zero results.
   Email addresses	Email addresses of users who should receive the email but who are not in the system.
   Subject	Text that appears in the subject line of the distribution email.
   Introductory message	Additional message that is delivered with the query results.
   Condition	User-created script that checks for certain conditions to be true before running the query. This field is visible only when Conditional is checked.
   Type	File format to use for the query results. Note: Configure the form layout to add this field to the form.

https://docs.servicenow.com/bundle/paris-servicenow-platform/page/product/configuration-management/t...

Please mark helpful or accept solution so that it helps others with a similar question. 

[The SN Nerd]

Hey,

Appreciate you taking the time to look into this.

I understand that I can schedule the report to users, but I want them to be able to see it in the tool. My report contains the relationship of 5 CI classes, and the report users need to be able to drill down into the CI's.

I've reached out to ServiceNow to understand what options I have and will post my findings.

Thanks,

Paul

[The SN Nerd · Accepted solution]

When a CMDB Query Builder is created by a user, it can run also by a user that has the "cmdb_query_builder_read" and "cmdb_query_builder" roles and can view the results in a new tab that will display.

However, accessing the "CMDB Query Builder Results [cmdb_qb_result_base]" table or list directly will ONLY be available to the user that created the CMDB Query.

Recommendation:

- To have the other users run the CMDB Query to view the results in a new tab.

- But, if the requirement is to allow the other users to view the CMDB Query Builder Results [cmdb_qb_result_base] list (even it is not the creator of the query), the ACL: "cmdb_qb_result_base/read" can be modified.

https://<instance_name>.service-now.com/nav_to.do?uri=sys_security_acl.do?sys_id=3c2d10decbb73200cab07f1b734c9c75

KB0868465 - CMDB Query Builder Results [cmdb_qb_result_base] access