ACL/role that provide read/create/delete access only to content items?

[NicoletaC]

Hello!

Is there a role or ACL that provides create/edit/read/delete rights on the table of content items, but not on catalog items at the same time? 
I am aware of the catalog_editor, catalog_manager and catalog_admin, none of these match the purpose. Is there anything else that could provide someone only to be able to see/edit/create/delete content items specifically and nothing else?

If not, is there any way to create such functionality without creating a new ACL/role? 

Thank you for any ideas!

[Sid_Takali]

Hi @NicoletaC 

Roles like catalog_editor or catalog_manager often provide broad permissions across both content and catalog items, which is not desirable in your case.

Creating a new role specifically for content items might be the most straightforward approach. 

1. create a new role, e.g., content_item_manager

2. Create new ACLs for the specific table that holds your content items. This ensures that only users with the       content_item_manager role can create, read, update, or delete content items.

3. Ensure that the ACLs apply to the relevant operations (create, read, write, delete).

Creating a custom role and setting up table-specific ACLs is the most effective way to provide deep access to content items without affecting catalog items.

Have a look at this Docs as well https://docs.servicenow.com/bundle/washingtondc-employee-service-management/page/product/employee-ce... 

Regards,

Sid