Grant access of table to users

[Servicenow Use4]

Hey Experts!

I have created a new custom table (let's call it myCustomTable). By default, the system created 4 basic ACLs, as expected. Also, a role was created : 'myCustomTable_user'

The requirement is: Business should have the ability to create reports on this table. but should not be able to do anything else.. so, basically, they should be able to read from that table. 

What is the best approach to achieve this?

Thanks in advance!

[mohdarbaz]

Hi @Servicenow Use4 ,

To meet your requirement of allowing the business to create reports on myCustomTable while restricting them to read-only access, you can follow these steps:

1. Create a Read-Only Role:

   • Create a new role, for example, myCustomTable_reporter.
   • This role will have read-only access to myCustomTable.

2. Assign Read-Only Permissions:

   • Navigate to the ACL (Access Control List) settings for myCustomTable.
   • Create a new ACL for the myCustomTable_reporter role with read permissions.
   • Ensure that this ACL only allows read access and does not permit any other operations like create, update, or delete.

3. Assign the Role to Business Users:

   • Assign the myCustomTable_reporter role to the business users who need to create reports.
   • This will ensure that they can read data from myCustomTable but cannot modify it.

4. Report Creation:

   • Business users with the myCustomTable_reporter role can now use reporting tools to create reports based on the data in myCustomTable.

By following these steps, you can ensure that business users have the necessary permissions to create reports while maintaining the integrity and security of the data in myCustomTable.

If my response helped, please hit the 👍Thumb Icon and accept the solution so that it benefits future readers.

Regards,

Mohd Arbaz.

[J Siva]

Hi @Servicenow Use4 

1. Modify the Create, Write, and Delete ACLs on your custom application by removing the custom role and adding the admin role.

2. Add the custom role to existing roles like ITIL, so that users with the ITIL role will inherit the custom role, OR create a new group with the custom role and add users to the new group.

Regards,
Siva

[Ankur Bawiskar]

@Servicenow Use4 

you can disable the WRITE, DELETE, CREATE access on that table by adding admin role in the Roles section

Now that custom role you can add as child role to itil or any other role which business wants

Also ensure you create report_view table ACL so that they see data in reporting, in this ACL add the custom role created during table creation

If my response helped please mark it correct and close the thread so that it benefits future readers.