External Access for Security Incident Response Tasks

Go to solution
rcarmack1
Kilo Guru

‎02-28-2020 08:57 AM

When we stood up the Security Incident Response module, our request was that non-SOC members could not see the SIR, but could only be assigned SITs.  Based on this, the appropriate groups were given the "response_task" Type and can be assigned tasks.  However, we are having issues with these groups being able to see what is assigned to them.  At this point, no one can see any tasks unless they get assigned to that person specifically.  

Currently, no groups have the role "sn_si.external", which I've been taking a look at.  This seems to give users visibility under "My Work" when they are assigned something specifically, but unassigned tasks cannot be seen under "My Groups Work", which is what we are trying to accomplish. 

Labels:
  • 4,759 Views
1 ACCEPTED SOLUTION

Go to solution
andy_ojha
ServiceNow Employee
ServiceNow Employee
In response to rcarmack1

‎03-02-2020 01:44 PM

Hey there,

You are on the right track.  It sounds like we've adjusted the table level write ACL for (sn_si_task) so far.

Check out the additional field level write ACL entries on (sn_si_task); many of them point to the "assigned_to" person as well.

Some of field level ACLs point to fields that you may want external users to edit, and some of these you may not want external users to edit.   

You can disable and re-create the appropriate write field level ACLs for (sn_si_task); that should get you a win.  (For example, you may not want those users to be able to write to the short_description, priority or cmdb_ci field, etc)...

find_real_file.png

View solution in original post

Preview file
10 KB
Preview file
9 KB
Preview file
10 KB
0 Helpfuls
21 REPLIES 21

Go to solution
Fredrik Standah
Giga Contributor
In response to andy_ojha

‎01-05-2022 06:47 AM

Didn't see you are a SNOW employee! Great to see someone from SNOW seeing the issue. We've tried escalating the issue a few times, no idea if that got anywhere. These are issues that we could of fixed ourselves, but we wanted SNOW to make this OOB functionality so others don't have to have the same issues.

Maybe you are able to nudge this one a bit!

0 Helpfuls

Go to solution
laraminski
Tera Contributor

‎07-10-2025 05:01 AM

Hi all,
This thread is now old but in case someone is wondering, as far as I can see on Yokohama release, this issue has been addressed and combination of response_task type on the group + sn_si.external role allow users to see the response tasks under 'My groups' work'

0 Helpfuls