Join the #BuildWithBuildAgent Challenge! Get recognized, earn exclusive swag, and inspire the ServiceNow Community with what you can build using Build Agent.  Join the Challenge.

Custom Role with All admin Access except delete operation

Bchaudhary
Tera Contributor

Hey community,

 

Is it possible to create a custom role that has the same privileges as the Admin role but restricts the ability to delete data from any tables?

If I create a custom role that includes the Admin role, it inherits full admin privileges. Additionally, if I apply a "Do not delete" ACL using a wildcard (*) across all tables, the restriction would apply to all users with the Admin role, not just the custom role.

4 REPLIES 4

Ankur Bawiskar
Tera Patron
Tera Patron

@Bchaudhary 

why not give read-only role?

The Read-Only role and how to use it 

Read-only role 

If my response helped please mark it correct and close the thread so that it benefits future readers.

Regards,
Ankur
Certified Technical Architect  ||  9x ServiceNow MVP  ||  ServiceNow Community Leader

Bchaudhary
Tera Contributor

Hi @Ankur Bawiskar ,

 

If I apply read_only, then everything will be read only. I want custom role to perform Create, Read, and Update operation except deletion

@Bchaudhary 

you will have to touch a lot more OOTB ACLs in that case which I won't recommend.

If my response helped please mark it correct and close the thread so that it benefits future readers.

Regards,
Ankur
Certified Technical Architect  ||  9x ServiceNow MVP  ||  ServiceNow Community Leader

Bchaudhary
Tera Contributor

Hi @Ankur Bawiskar ,

 

Yes, that's true and I want to avoid it. Thanks