Allow specific role ability to manage related sla's within service contracts (SLA Contract Add-on)

shonamac
Kilo Expert

Hi Everyone,

This is driving me crazy being unable to figure this out so hopefully someone has come across this before and can point me in the right direction

We have enabled the SLA Contract Add-on plugin within our environment so we can utilise a service contract as the master document, We are on Geneva.

Currently only an admin can view and modify the sla's which are attached to a service contract

We have a contract manager who I'd like to have ownership of managing service contracts and their associated sla's - they will not be creating/deleting any SLA definitions, it's purely to be able to add the sla's from a slushbucket to a service contract

I managed to sort out the issue with them being able to view sla's associated with a service contract by creating an ACL on the Contract SLA (contract_rel_contract_sla) table granting them read permissions for their role

I am unable to to get their role to see the edit button on the SLA related list (as seen in the screenshot) so they can grab the available SLA definitions from the slushbucket

Screen Shot 2016-09-27 at 16.08.42.png

I've tried modifying the list control to enable access to their role but this has no effect. (I even tested by checking the Omit edit button on the list control to verify list control modifications were working for an admin user)

I've read up a little about embedded lists and standard lists from this article - Configure list controls and even tried setting up ACL's as if this were an embedded list to no avail. If this were an embedded list though then it wouldn't make sense in how I can change the behaviour for one role and not another.

If anyone can shed any light that would be great, otherwise I'll go ahead and raise a case with servicenow support

Thanks

Shona

8 REPLIES 8

I went to the table, and created the ACLs from there:


Screen Shot 2016-09-28 at 8.03.16 AM.png



I removed the admin role from the application and added itil role, then impersonated itil user and this is what they see:


Screen Shot 2016-09-27 at 9.28.49 PM.png


Hi Michael,



I wanted to let you know that I resolved the issue - the problem was indeed a rogue ACL that had not been defined properly



Thanks for your help


Hi schona, Michael,



I would not like to give itil role to read or manage contracts. In multivendor environment this mean that vendors can read (and edit!) conditions of one another. Can we stick with contrcact_manager role here?


Yes - out of the box Contract Manager or Asset roles will work.