I need to write ACL on cmdb_ci_computer table

Saba Baig
Tera Contributor

There is an ACL on cmdb_ci table which allows admin to edit the status field in list view. Now I want to make another ACL on cmdb_ci_computer table where the status field should be editable to a particular group.
@Chuck Tomasi 
@Maik Skoddow 
@Mark Roethof 

@Gaurav Shirsat 

@ghaing 

@tltoulson 

@Ankur Bawiskar 

@Community Alums 

3 ACCEPTED SOLUTIONS

Samaksh Wani
Giga Sage
Giga Sage

Hello Saba,

 

You need to write field level write ACL, In which you can write this Script.

 

 

 

if(gs.getUser().isMemberOf('sys_id_of_grp'){
answer=true
}
else{
answer=false
}

 

 

 

Plz mark my Solution as Accept and give me thumbs up, if you find it helpful, it will help other users as well

 

Regards,

Samaksh

 

 

View solution in original post

Amit Gujarathi
Giga Sage
Giga Sage

HI @Saba Baig ,
I trust you are doing great.

  1. Fill in the required details for the new ACL:
    • Name: Provide a descriptive name for the ACL, such as "Edit Status Field for Group X."
    • Description: Add a brief description of the purpose of this ACL.
    • Active: Check the box to make the ACL active.
    • Application: Specify the application or leave it blank for a global ACL.
    • Operation: Set it to "Write" to allow editing.
    • Query: Add a condition to restrict the ACL to a particular group. For example, if the group name is "Group X," the query could be: group=Group X.
  2. Save the ACL.

Was this answer helpful?


Please consider marking it correct or helpful.


Your feedback helps us improve!


Thank you!


Regards,


Amit Gujrathi



View solution in original post

Devender Kumar
Tera Guru
Tera Guru

Hi @Saba Baig ,

You can give list edit access for some fields/columns using list edit ACL.

For example - To give the access to edit the Status field cells on cmdb_ci_computer table.

Type: record

Operation: list_edit

Name: Computer.status // add your table name & fields here

Script:

if(gs.getUser().isMemberOf('your group sysid')
{
answer=true;
}
else
{
answer=false;
}

 

If my answer helps you to resolve your issue then please mark it as correct and helpful.

Regards,

Devender 

View solution in original post

7 REPLIES 7

Samaksh Wani
Giga Sage
Giga Sage

Hello Saba,

 

You need to write field level write ACL, In which you can write this Script.

 

 

 

if(gs.getUser().isMemberOf('sys_id_of_grp'){
answer=true
}
else{
answer=false
}

 

 

 

Plz mark my Solution as Accept and give me thumbs up, if you find it helpful, it will help other users as well

 

Regards,

Samaksh

 

 

Amit Gujarathi
Giga Sage
Giga Sage

HI @Saba Baig ,
I trust you are doing great.

  1. Fill in the required details for the new ACL:
    • Name: Provide a descriptive name for the ACL, such as "Edit Status Field for Group X."
    • Description: Add a brief description of the purpose of this ACL.
    • Active: Check the box to make the ACL active.
    • Application: Specify the application or leave it blank for a global ACL.
    • Operation: Set it to "Write" to allow editing.
    • Query: Add a condition to restrict the ACL to a particular group. For example, if the group name is "Group X," the query could be: group=Group X.
  2. Save the ACL.

Was this answer helpful?


Please consider marking it correct or helpful.


Your feedback helps us improve!


Thank you!


Regards,


Amit Gujrathi



Ankur Bawiskar
Tera Patron
Tera Patron

@Saba Baig 

you can create field level write ACL on that field

use advanced script and use this script

answer = gs.getUser().isMemberOf('Group ABC');

Regards,
Ankur
Certified Technical Architect  ||  9x ServiceNow MVP  ||  ServiceNow Community Leader

@Saba Baig 

Thank you for marking my response as helpful.

If my response helped please mark it correct and close the thread so that it benefits future readers.

Regards,
Ankur
Certified Technical Architect  ||  9x ServiceNow MVP  ||  ServiceNow Community Leader