what is the minimum role to see incidents of the assigned group?

[New user1212]

What role should I give the user so that they have minimum access, i.e. only to assigned requests and incidents for the group they belong to?
The snc_internal role allows you to view only assigned incidents and requests per user.

I need a solution that gives access only to things assigned to the user's group

[Dr Atul G- LNG]

Hi @New user1212

You can give Incident_write role and create an ACL to view specific groups incident.

[New user1212]

but by giving someone the sn_incident_write role you also give a wider scope because the role includes other roles and I don't want to give such access to an external user...

[Dr Atul G- LNG]

So in this case, create a new role only for incident.

[MarryJen]

To give users access only to incidents and requests assigned to their group, you’ll need to create a custom role and configure ACLs. First, ensure the users are added to the correct groups in User Groups. Then, create a new role (group_incident_access) and assign it to those users.

Next, set up ACLs for the Incident and Request tables. In the ACL conditions, allow access only if the record’s assignment group matches the user’s group. For example, you can use a script like:

javascript
var userGroups = gs.getUser().getMyGroups();
if (current.assignment_group && userGroups.contains(current.assignment_group.sys_id)) {
answer = true;
} else {
answer = false;
}

This ensures users can only view records assigned to their group or directly to themselves. For extra control, you can also use filters or UI policies to hide irrelevant data.