why "snc_internal" is automatically getting added to ACL? how can we delete it?

Sathwik1
Tera Expert

why "snc_internal" is automatically getting added to ACL? how can we delete it?

5 REPLIES 5

Maik Skoddow
Tera Patron
Tera Patron

Hi Sathwik,

that role is the result of the Explicit Role Plugin (https://docs.servicenow.com/bundle/quebec-platform-administration/page/administer/security/reference...). 

The plugin makes sure, that you have no insecure data because of missing ACLs. And you cannot delete that role because after that it is added again automatically.

Kind regards
Maik

If my answer replied your question please mark appropriate response as correct so that the question will appear as resolved for other users who may have a similar question in the future.

Hi @Sathwik ,

Did my reply answer your question?

If so, please mark the appropriate response as "correct" so that the question will appear as resolved for other users who may have a similar question in the future.

If not, please tell me what you are still missing.

Many thanks & kind regards
Maik

Michael Jones -
Giga Sage

If you have the Customer Service Management plugin enabled, it automatically enables the Explicit Roles Plugin as well. 

https://docs.servicenow.com/bundle/quebec-platform-administration/page/administer/security/reference...

Basically this is a "safety net" to ensure that external users do not have access to things that you don't explicitly give them access to. 

You are not able to remove the role from ACL's while this plugin is enabled and all of your internal users should be given this role by default. 

I hope this helps!

If this was helpful or correct, please be kind and remember to click appropriately!

Michael Jones - Proud member of the CloudPires team!

 

I hope this helps!
Michael D. Jones
Proud member of the GlideFast Consulting Team!

CraigD
Tera Contributor

I realize this thread is a couple years old now, but wanted to let you know what we did as a work-around.

 

We needed to setup an ACL to prevent list edits of a user field, and ran into this issue. Work around was to replace the snc_internal role "admin" role to prevent it from being automatically added again.