Not a question.
Discover how read-only admin access in ServiceNow lets you share full platform visibility without risk.
Have you ever needed read-only admin?
Ahoy @EgSnow, thank for taking the time to review my posts, it's really appreciated! Do you also have any actual evidence for that or is this just an assumption?
Because I tested it myself again to demonstrate you what I tried to explain above - you simply CANNOT get stronger permission by impersonation than what you currently have assigned, you just don't.
Here is what I did and I invite you to validate from your end as well, create two users:
- "User_a": admin-read-only
- admin + snc_read_only
- "User_b": admin-standard
- admin only
Then I logged as User_a (admin-read-only) and impersonated the User_b (full admin) and checked random records as seen below.
A business rule:
A user profile:
A location record:
Also tried to access background script:
Read-only access is still read-only and isn't overridden by impersonation and the above proves it.
I'm happy to discuss this further if you have something concrete to back up your claim but but it looks more like unvalidated assumptions than anything actually tested and verified from your end, what do you reckon?
Ahoy @EgSnow, thank for taking the time to review my posts, it's really appreciated! Do you also have any actual evidence for that or is this just an assumption?
Because I tested it myself again to demonstrate you what I tried to explain above - you simply CANNOT get stronger permission by impersonation than what you currently have assigned, you just don't.
Here is what I did and I invite you to validate from your end as well, create two users:
- "User_a": admin-read-only
- admin + snc_read_only
- "User_b": admin-standard
- admin only
Then I logged as User_a (admin-read-only) and impersonated the User_b (full admin) and checked random records as seen below.
A business rule:
A user profile:
A location record:
Also tried to access background script:
Read-only access is still read-only and isn't overridden by impersonation and the above proves it.
I'm happy to discuss this further if you have something concrete to back up your claim but but it looks more like unvalidated assumptions than anything actually tested and verified from your end, what do you reckon?
