I want to give read write access to cmdb_ci_computer table to specific assignment groups which are having ITIL role

[jyotsna1]

I want to give read write access to cmdb_ci_computer table to specific assignment groups which are having ITIL role.

Already CMDB access is available for all ITIL users, but when I try to open particular class records it is not showing any records.

So I created a new CUSTOM ROLE and added the role all required assignment groups, created 2 ACL's (Read & Write) with the below conditions

Type: record

Operation: Read, Write

Name:  cmdb_ci_computer, left second dropdown as none 

Added the Role 'CUSTOM ROLE' to the requires role related table

But with these ACL's it is revoking the access to entire cmdb_ci_computer table.

Someone please help me in this case.

[Brian Lancaster]

If you are just trying to make it so these groups have write but do not want ITIL to loose read remove the read ACL.  Since it is already granted to all users it should not be needed.

[Apeksha Joshi]

Hi Jyotsna ,

follow the following steps 😛

1)you need to first create 1 Acl with operation read , type record , table name and none 

  this will give access to table .

2)then create 2nd acl with operation read , type record , table name and * 

  this will give access to all the fields of the table for just read operation.

and if futher you wish to give the access for write operation then you need to create 3rd acl 

3)operation write , type record , table name and */table name and field name(to access specific field)

and after select the role for which you want that access.

if stuck anywhere you can ask me or refer following link :

https://community.servicenow.com/community?id=community_question&sys_id=1c540369dbd8dbc01dcaf3231f96...

If my reply helps you at all, I’d really appreciate it if you click the Helpful button and if my reply is the answer you were looking for, it would be awesome if you could click both the Helpful and Accepted Solution buttons! 

[jyotsna1]

Hi Apeksha,

I created all 3 ACL's as suggested by you, but still it is not working. It is not giving access to all the records in cmdb_ci_computer table. Users are able to access only few records, not the complete list of records.

Please help.