Issue with Roles

[PaulSylo]

Hello All, 

I am facing a weird issue. All of a sudden, All my inactive users are getting ITIL License tagged and this keeps growing. I sought support from ServiceNow, but while I waiting for them, i thought I could get your attention.

I was working on report access which is restricted by ACL, While working, ( I am not sure I messed up the ACL definition), Suddenly a background script started running and it started assigning ITIL License to all inactive users ( Say my overall ITIL User are 2000, and Overall 50K user are now having ITIL License. I checked all possible transactions, no clue. but all users have this pattern of roles (57). Inheritance maps also not showing anything. any similar experience or any help which role might caused this script run?

 

 

[Tony Chatfield1]

Hi, I have seen SNC apply snc_internal role to sys_user records without any other role, but not 'itil' roles

Have you checked for running transactions via Node Transactions (all users) ?
I would be surprised if SNC was applying the same 57 roles to inactive users via script and suspect the issue is local, perhaps by addition of the users to a group? what do the individual 'sys_user_has_role' records say about inheritance?
Have you reviewed your logs\transactions for details of scripts\scheduled jobs that map to the times the roles were applied to the users?

[PaulSylo]

Hello Tony,

Thanks for your response. I checked all the transactions but there is no trace of any except this,

Inheritance is also blank and I do not see any mappings. As you suspect this is issue is local, due to one role, but surprise, how this will create a BGscript to add those ITIL users.