Values of a reference field is missing for Non-Itil Users

[Irene M]

hi everyone,

We have this catalog form where one of the field is reference to Printer [cmdb_ci_printer]. However, only users with ITIL role can see values of this field.

For NON-ITIL users, it says "No matches found"

What's causing this issue and how to fix this?

[mugi-san]

Hello, @Irene M .

Users who need to read CMDB records will require the "cmdb_read" role. My understanding is that this role is a requestor role, so it should be possible to grant it to non-ITIL users for read-only access.

As others have also mentioned, it is recommended to grant roles to groups and then add users to those respective groups.

regards.

[Irene M]

Hi @mugi-san thanks for responding. 

We need this field to be available to all of our users so I am not sure if granting roles to a group then add users is the best approach. Is there any other way?

[mugi-san]

Hello, @Irene M .

Yes, you are correct. One solution is to create a group that includes all users and assign the "cmdb_read" permission to that group. (It is also possible to create special custom roles with cbdb_read-like ACL read permissions and assign them to users, but this depends on your requirements.)

[KB0826533]Does the cmdb_read role need a license?

An alternative method I have used is to create the catalog item so that it does not reference the 'cmdb_ci_printer' table in the first place.

Specifically, we can use a variable in the catalog item that allows for string selection (e.g., a Select Box variable) and make it appear as though the user is selecting from 'cmdb_ci_printer'. This approach, however, poses a fundamental risk because it is not actually selecting records that exist in the table.

regards.

If you found this post helpful, I would appreciate it if you could click the “Good” button or close the case.

[Ankur Bawiskar]

@Irene M 

non-itil users seems to fail table.None READ ACL on your table and hence not working

is there any query business rule blocking it?

if you have ref qualifier on your variable then is that bringing data for non-itil users?

💡 If my response helped, please mark it as correct ✅ and close the thread 🔒— this helps future readers find the solution faster! 🙏

[Irene M]

Hi @Ankur Bawiskar thanks for responding. No, there's no business rule for this. So the best solution is to create a read-only ACL on the table, is that correct?