ITIL Admin Role/Permissions

[jmoore]

Hi,

We'd like our users with the ITIL Admin role to be able to perform the following actions. Are these generally functions that users with the itil_admin role should be able to perform, or are they seen as more admin roles/functionality? Is there a way update the role or do I need to create ACLs?

1) Add types to groups. Currently, they are unable to read the sys_user_group_type table.

2) Edit group relationships. The edit button is not displayed.

3) Drill into the details of report based on the Problem Metric table

Thanks!
Jessica

[Jaspal Singh · Accepted solution]

Hi Jessica,

It all depends on the business requirements of the company.

Mostly they are restricted to only Admins but if there are cases wherein other Users should also be able to do those stuffs it can be managed by creating roles & updating existing ACLs on those tables that are currently applicable only to admins.

Kindly find my comments in red.

1) Add types to groups. Currently, they are unable to read the sys_user_group_type table.

There is an ACL for this table that has Admin overrides & hence works only for Admins. You can add necessary role (itil_admin) so as to make it work for them as well.

2) Edit group relationships. The edit button is not displayed.

Are you referring this to CI relationship & group association to that. If yes, we have ACLs on cmdb_rel_ci table for read & write access which is limited to Admins OOB. You can modify those ACLs by adding itil_admin role & would work well then.

3) Drill into the details of report based on the Problem Metric table

For this you need to create a read ACL on the Problem Metric table & add itil_admin role for it to work.

Thanks,

Jaspal Singh

Hit Like or Correct on the impact of response.

[antin_s]

Hi Jessica,

Yes, ACLs and Display Business Rules are the way to get access. Please add required ACLs or modify existing ACLs of those 3 tables. That should be enough.

But please keep in mind that some of these (especially group/role) related are admin functionalities and may not be itil functionalities.

Hope this helps. Mark the answer as correct/helpful based on impact.

Thanks

Antin