What is the best way to grant access to "Database View"?

nobutomo
Kilo Explorer

I'd like to let some IT folks to use the "Database View" to create reports which refer multiple tables.

I'm not sure how I should grant ACL to them.

Is there any simple and easy way to do it?

11 REPLIES 11

I would start with the sys_db_view ACLs.   Make sure the itil (or whatever role) user has create.   Expose the module by adding that role to it, as well.


ganeshb_
Tera Expert

Hi Nobutomo,



For restricting the access to the reports using Database views you will need to create "report_on" type of ACL on the desired tables so you can restrict the access to tables and in turn on database view as well.


For more info - Administering Reports - ServiceNow Wiki


And also you can put restrictions on Reoprts as well. Reporting - ServiceNow Wiki


Thanks,


Ganesh


I had a similar issue when e upgraded to Fuji. I opened a HI ticket and got the following response."Starting in Fuji, database views will require explicit ACLs. You will need to create a ACL to allow access to the database view"



You can setup an ACL in the 'System Security -> Access Control (ACL)' module. You need to create a 'read' ACL on the view name. Example below:



Operation: read


Name: <The name of the DB View>



Set the 'Requires role' to the role that needs the access. All other fields can be left default. Also, below is a ServiceNow Wiki on ACLs:



Using Access Control Rules


http://wiki.servicenow.com/index.php?title=Using_Access_Control_Rules#gsc.tab=0



I impersonated the user having the issue and was able to run the report.


Can you elaborate. I created a New ACl with Operation: Read



under Name you say "<The name of the DB View>" , I have the names of all the tables I can choose.   Users can see the report they need access to in every style except list view.



I have users given explicit read access to records in a table but when they run a list report on it, they get an error.




Fuji has also rendered some reference fields inaccessible with the "Security constraints prohibiting access"



The KB article was something i read as well but like the original person that posed the question- how exactly do you grant this access as referenced below.


Starting in Fuji, database views will require explicit ACLs. You will need to create a ACL to allow access to the database view"