External Access for Security Incident Response Tasks

[rcarmack1]

When we stood up the Security Incident Response module, our request was that non-SOC members could not see the SIR, but could only be assigned SITs.  Based on this, the appropriate groups were given the "response_task" Type and can be assigned tasks.  However, we are having issues with these groups being able to see what is assigned to them.  At this point, no one can see any tasks unless they get assigned to that person specifically.  

Currently, no groups have the role "sn_si.external", which I've been taking a look at.  This seems to give users visibility under "My Work" when they are assigned something specifically, but unassigned tasks cannot be seen under "My Groups Work", which is what we are trying to accomplish. 

[Lord Omicron]

The groups also need to have sn_si.external role in order to be able to see the tasks. 

[rcarmack1]

I mention this in the second paragraph - it only allows them to see SITs assigned to them, but not unassigned ones that are assigned to their group. I need them to see what is assigned to their group.

[rcarmack1]

Based on what I've seen, I think what I need to do is to allow the "My Groups Work" to access SITs assigned to a group but not yet assigned to an individual user.  Any ideas on how to achieve that?  

Ref: https://community.servicenow.com/community?id=community_question&sys_id=d81b06f9db737bc86064eeb5ca96...

[SanjivMeher]

I would look at the ACL on sn_si_task. The OOB read and write ACL only allows assigned to.

I would add another condition isMemberOf to check, if user is member of that group to allow read and write to that table.