How to add a required role to a report_view ACL whose Protection policy is set to 'Read-only'

[hdaumas]

I'm trying to add the report_admin role to the 'report_view' ACL on the cmdb_running_process table. By default it only has admin but I don't want to grant admin to someone who just just needs to access this table for a report. Unfortunately, this ACL has its Protection policy set to Read-only and so the entire record cannot be edited, even when I have elevated my privs to security_admin. How do I remove the Read-only protection policy?

[harun_isakovic · Accepted solution]

Just create another same ACL except instead of admin give it the other role you want to enable same access too. When the ACLs run and evaluate the admin one will fail but the other one with the different role will pass (if the user has it) and he will be able to complete the operation you specified.

[hdaumas]

Thank you. That worked perfectly and was so simple!

[harun_isakovic]

Glad it did 🙂

[muniratu]

Can you please mention the steps for creating new ACL.