Can't remove approvers

[John Vo1]

I have an issue where users are able to add approvers when they select the Edit button.   But when they try to remove them from the list it will still show up.  

Once they save and go back to the RITM both users that they removed will show back up.

[Chuck Tomasi]

It's most likely that they don't have delete access to the sysapproval_approver table - nor would you want them to in most cases.

Check your ACLs carefully to ensure the right people have the right access at the right time (e.g. only change_owners can delete while in the Draft state, for example.) That can all be wrapped up in one ACL.

Docs: Access control rules

Docs: Contextual security  

Security Best Practices - ServiceNow Wiki

[John Vo1]

Chuck,

You are correct that I don't want them to have delete access.   But I at least want then to remove the the approvers if the wrong approver is in the list.

Thanks,

JOhn

[Chuck Tomasi]

Removing an approval requires delete access to remove the record from the table (which removes it from the list.)

[John Vo1]

So I would just need to add their role to the script like this.

answer = gs.hasRole('approval_admin') || gs.hasRole('itil')