Hi There,
I am about to write my CSA exam so in preparation I bought two practise exams on Udemy, one of the questions which is True or False asks:
The answer in the practise test is True, but when using my developer instance I tested creating a new user with no roles and a new knowledge base with no "access controls" and tested. My user can read the knowledge article I created in the test knowledge base but there are no options to create or edit. Only provide feedback.
I also did a diagnostic on the user and this is the result.
Although that only shows access to the knowledge base I am unable to find any information around default access to knowledge articles. i.e. by default users can read, create and edit knowledge articles by default.
Does anyone know what the actual answer would be and could you please explain:)
Thanking you in advance.
Cheers,
Ty
Hi Ty,
This is one of the disadvantages of using unofficial things that isn't validated by ServiceNow themselves. You are totally right, an end user can't create articles. OOB when you create a knowledge base there isn't any restrictions set, all "internal" users can do what is asked for here. and I think that is what hey mean by "all users", but since it isn't defined if they include end users (which I also thought, just like you and you should when you take the exam), this question is wrong. In the baseline configuration there is an Create ACL on kb_knowledge table that checks if it's external/end user that is trying or it's an internal (which then have the snc_internal) role. But we can stop right here, since there is conditions on who can create, there will always be someone who can't, since otherwise the ACL wouldn't be doing anything.
//Göran
Hi Ty,
This is one of the disadvantages of using unofficial things that isn't validated by ServiceNow themselves. You are totally right, an end user can't create articles. OOB when you create a knowledge base there isn't any restrictions set, all "internal" users can do what is asked for here. and I think that is what hey mean by "all users", but since it isn't defined if they include end users (which I also thought, just like you and you should when you take the exam), this question is wrong. In the baseline configuration there is an Create ACL on kb_knowledge table that checks if it's external/end user that is trying or it's an internal (which then have the snc_internal) role. But we can stop right here, since there is conditions on who can create, there will always be someone who can't, since otherwise the ACL wouldn't be doing anything.
//Göran
