How to Assign a Role to ALL users? I know how to assign a role to an individual user.

ashleybischoff
Tera Contributor

Hello Everyone, I am new to SNOW Admin, Developement, etc.  I have a form that was designed by an employee who is not longer with our company.  I need to have this form accessible to ALL employees.  The Link type is: List of Records and the Table is: IT Request Form(x_enpi_it_requests_requests).  I have determined that it requires the role: x_enpi_it_request.requests_user,.  How can I assign this role to ALL employees on the SNOW platform so they can access this form.  I know how to assign a role to an individual.  But I can't determine to assign this role to ALL employeee.  Is there a way to assign a role to ALL employees/users on the SNOW platform?. Please help! Thank you!

1 ACCEPTED SOLUTION

So the roles are part of the Explicit roles plugin, which are included in CSM and HR. So I am assuming, based on your answer, that your dev instance has one of those, while your prod instance does not have either of those products.  If it does, then it will be a matter of activating that explicit roles plugin, which will provide the snc_internal and snc_external and public roles.

If you do not have those on prod, there are a few options, you could script giving the role to every user in the sys_user table (which isn't recommended as best practice is to give roles to groups, and add members), you could also create a group, then script adding every user needed to that group, Lastly, you could change the ACLs for that table, to a role that you know is more widely held.

If this information helped resolve your issue, please remember to mark response correct and thumbs up to help future community members on this information, thanks!

View solution in original post

3 REPLIES 3

Zach Koch
Giga Sage
Giga Sage

You could run a script to give that role to all active users on the platform. Another option would be to change the ACLs for the table that the form is on so that snc_internal would give them access, which every internal user should have if you have the applications.

If this resolved your issue, please mark this correct and helpful, thank you1

If this information helped resolve your issue, please remember to mark response correct and thumbs up to help future community members on this information, thanks!

Zach, Thanks for the reply.  But..... snc_internal  is only available in our Dev enviornment.  Do you know why that would be the case and can I add it to the productions   Thank you.  

So the roles are part of the Explicit roles plugin, which are included in CSM and HR. So I am assuming, based on your answer, that your dev instance has one of those, while your prod instance does not have either of those products.  If it does, then it will be a matter of activating that explicit roles plugin, which will provide the snc_internal and snc_external and public roles.

If you do not have those on prod, there are a few options, you could script giving the role to every user in the sys_user table (which isn't recommended as best practice is to give roles to groups, and add members), you could also create a group, then script adding every user needed to that group, Lastly, you could change the ACLs for that table, to a role that you know is more widely held.

If this information helped resolve your issue, please remember to mark response correct and thumbs up to help future community members on this information, thanks!