We need data managers that don't have cmdb admin role.

[Robert Campbell]

We have a team that manages data certification but now that it's being moved into the CMDB workspace you need the cmdb admin role to manage data certification and attestation (which I feel is absurd). 

Would we need to create custom ACLs to make this possible or is this not possible at all?

[Mark Manders]

It depends on if you want them to access the CMDB workspace or not. Where is the limitation? Are there new ACL's preventing them to do access the records, or is the CMDB Workspace not accessible for them? Depending on what the actual issue is, you can create access on their current roles or create ACL's to grant them access to the data.

[Robert Campbell]

I figured it out. With these roles, they are able to manage the policies.

The main one I needed to add was itil_admin

[Robert Campbell]

The issue is that we don't want to give cmdb admin role for data management. There should be a role that allows data managers to manage data w/o being admin.

[Mark Manders]

Then you need to create one that grants only those permissions.