Should not allow to add ITIL or Admin roles to Contact users

[Sarah Bouil]

If I try to add itil or admin role to Contact users, I want to abort the action. Kindly assist me.

[Krushna R Birla]

Hi @Sarah Bouil 

This can be achieved via before business rule on the 'sys_user_has_role' table. Add condition as user.class is contact and use roles condition field to add both roles. 

Then in action you just need to checked abort checkbox and you are all set.

This will definitely helps you to resolved your issue. Let me know in case you need to understand the flow or you can DM on LinkedIn.

If this solution resolves your query, kindly mark it as the accepted solution and give it a thumbs up.

Best Regards,
Krushna Birla

[Sarah Bouil]

Thank you for your quick reply. Also I want restrict from Group as well. The ITIL or Admin role will inherit from group also right. Should be restricted it. How to do that?

I mean  I should restrict to add ITIL or Admin role if I try to add Explicitly from Roles tab and Groups tab(I mean Related List in User profile record)? How can I do that please?