To limit the PA widgets on Service Portal

[trangdan106]

Hello everyone,

I have a PA widget and I have it implemented on the Service Portal using the OOTB Platform Analytics widget.

I'm now having problem about limiting the PA widgets/reports access. I have set the OOTH service portal widget public but I have set access control restrictions on the PA indicators that users should have the "snc_internal" role:

However, the users without said role and have access to service portal, can still view the PA widgets/reports on the service portal.

Based on this, the PA widgets should fllow the PA indicators' access controls:

Performance Analytics widgets • Australia Platform Analytics • Docs | ServiceNow

I've also check the ACL and make sure the user doesn't have any roles that can allow access to PA indicators and PA widgets.

[Vikram Reddy]

Hi @trangdan106,

Hit this exact setup on a portal build last year: OOTB PA widget public, indicator locked to a role, report still visible to everyone anyway. The Service Portal widget doesn't reliably re-check indicator access control the way Analytics Hub does, it's a known gap in Platform Analytics. Check:

• Roles on the widget instance itself, don't rely on the indicator ACL alone to gate the portal.
• The Visible to field on the indicator, your screenshot shows Everyone, that combination with Roles is only reliably enforced in Analytics Hub.
• Whether the widget points at a dashboard rather than the indicator, dashboards have their own separate Access control tab.

Lock the widget instance role first, that's what actually stops it on the portal.

Thank you,
Vikram Karety
Octigo Solutions INC

[trangdan106]

Thank you so much, by the analytics hub, you mean this right?

Because I changed it to "visible by all role" but a user with external roles cannot view it, I also added the pa_viewer role