How can we prevent deletion of approval requests?

[Jaap Grol]

We don't want users to be able to delete any approval request. It seems that the only way to achieve this requires customization in OOB Delete ACL.
Is this the only way?
From auditing and compliance perspective this seems odd.

[Ankur Bawiskar · Accepted solution]

Hi,

you can use either of the approach

1) Table level DELETE ACL

OR

2) Before delete business rules

OR

3) Hide the Delete UI action on table itself

Regards
Ankur

[Allen Andreas]

Hi,

You'd have to adjust the out of box ACL on the sysapproval_approver table to disallow anyone to be able to delete. Otherwise, out of box, approval_admin role can, and itil and catalog role users can if the system property: glide.approvals.restrict_delete is non-existent or set to false. Delegates can also change the approval to be focused to them instead of the original approver, if needed.

Your ServiceNow instance would need to be setup per your individual organization's auditing and compliance perspectives.

The same could be said for allowing delete of anything...in your instance. Not just approvals.

This is something you have to setup and establish yourself.

Please mark reply as Helpful/Correct, if applicable. Thanks!

[Allen Andreas]

Hi @Jaap Grol 

Thank you very much for marking my reply as Helpful.

If it ends up guiding you Correctly, please also mark it as Correct.

Thanks and take care! 🙂

[Jaap Grol]

Thank you @Allen Andreas for this reply. Unfortunately the system property you mention is not documented anywhere, it seems. 

Do you have any pointers to documentation of this property?

Thanks!