domain visibility or roles

[hemanth_alapati]

The user is on one domain and the visibility was given to another domain and he could not see incidents.and when i see the group has two roles. in which one role contains 4 roles, and when i add the user to the group. the user is getting only two roles. i guess there is some problem with inheriting roles.not sure.. can someone help me? iam using helsinki version of servicenow.

[Erich Zirnhelt]

Was the user granted visibility through the same group that has the two roles?

One idea - the role relationships are in a different domain and not accessible in the visibility-granted domain - check out domain fields in the the sys_user_has_role list for that user.

[hemanth_alapati]

the roles are in the same domain that user is a part of. and group is in another domain where user is a part of another domain.

[Erich Zirnhelt]

So, if I understand this, the user is not inheriting roles (from his own domain) that are granted by a group (in a different domain, but to which he has visibility).

I'm not sure roles inheritance from groups would work across domains, even if the user is allowed to see them.

If you move, or recreate those roles in the other domain, will it work?

[hemanth_alapati]

yes.

let me explain you clearly with an example.

user is created in TOP/A domain.

group to which user is added is in TOP/A/B domain.

roles are in TOP/A domain.

visibilty is given to the user in TOP/D domain.