Restricting RITMs or tasks access of a particular item to a certain group

[Manasseh Nikhil]

Hello,

Is there a way we can hide or restrict access of RITMs raised from a catalog item to only certain assignment group. Even ITIL users and admins should not be able to view it in list view. It should only be visible to that particular group which we need. Its related to confidentiality requirement.

I tried to create an ACL and gave it read operation where condition item value will be of that catalog item and if the user is a member of that group then answer will be true. But it is not working. I think it is conflicting with out of box ACL rule to sc_req_item read operation rule where role is ITIL. So ITIL users are able to view.

Is there any other way to achieve this?

Thanks in advance.

Regards,

Nikhil

[Aman Kumar S · Accepted solution]

In the OOB ACL, you can add condition such as:
catalog item -  is not - your_catalog_item

And have a dedicated ACL for yours as:

catalog item -  is  - your_catalog_item

It should work alright then

[Manasseh Nikhil]

Thanks a lot for above solution. I tried it and it works perfectly fine.

Also I wanted to know, I have edited OOB ACL will it have any effect when instance will be upgraded. Like whatever I have updated it will stay as it is right after instance upgrades or will it be overwritten?

[Aman Kumar S]

It won't be overwritten. It will come as a skipped record for upgrades, which you can Retain or Revert to base version which is a post upgrade activity in sub prod instances.

Feel free to mark correct, If I answered your query.

Will be helpful for future visitors looking for similar questions 🙂

[Manasseh Nikhil]

Thankyou