Need to restrict user to edit user table records excepts some fields.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
09-14-2020 06:10 AM
Hi All,
I have a requirement to give access to one group who can edit only two fields of user table.
I created one role and i created two wrote ACL's which will give access to write this two fields.
As user module will be available after user_admin role only so i gave user_admin role to that group.After adding this role all the fields are editable for them on user table.
Can anyone please suggest how to achieve this.

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
09-14-2020 06:14 AM
Hi Can you share your ACL screenshot for write which you created?
https://docs.servicenow.com/bundle/orlando-platform-administration/page/administer/contextual-security/concept/access-control-rules.html
Please Mark as ✅ Correct if this solves your issue and also mark ???? Helpful if it helps resolve your problem.
Thanks,
Saji

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
09-14-2020 06:16 AM
Hello,
Can you check for Admin Override check box on ACL?
Thanks,
pratiksha
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
09-14-2020 06:25 AM
yes this is checked.I want to restrict to edit fields of user table to one assignment group.

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
09-14-2020 06:27 AM
Can you share your ACL screenshots.

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
09-14-2020 06:36 AM
Hi Karishma,
As you mentioned you want to give access to one group, so instead of giving the role user_admin. Request you to try having field level ACL and check the advanced checkbox and within script try using the below validation
(function() {
if (gs.getUser().isMemberOf(group_name_or_sys_id_of_group))
return true;
else
return false;
})();
Kindly mark my answer as Correct and Helpful based on the Impact.
Regards,
Alok