Only allow admins to delete records, on all tables.

[RoniRan01111]

Hey all,

My aim is to prevent all users, but admins, from deleting records on all tables. We don't want any mistakes to happen with the deletion of records.
For that purpose, I created a "general ACL" (*) that gives access to only admins to DELETE operations. The problem is that we have specific ACLs on all tables which triumph over the general one. Can I override these ACLs? Can I disable them using a script (because I don't want to go into each and every table separately)?

Does anyone have an idea on how to solve this issue? Or maybe explain on why it is not the best way to achieve our target?

[Brian Lancaster]

ACLs are table based. What table did you put this ACL on?

Edit: another thing is out of the box for ITSM unless you are giving out itil_admin nobody should be able to delete records from things like incident, request, request item, etc. 

[RoniRan01111]

Thanks for replying Brian,
 
The "general ACL" is not associated with a table. I did this ACL following this community question:
https://www.servicenow.com/community/developer-forum/how-we-can-disable-delete-operation-in-all-of-t...

We already have ACLs on all tables that permits different roles to delete records. We want to prevent it from all users but admins. Do we really need to go to each table and change the ACL on associated to it? 

[Harish Bainsla]

Hi @RoniRan01111 create Acl

https://youtu.be/5x96qND4SDA?si=HMJXs0mrgo0kFJrO

[RoniRan01111]

Hey Harish,
I'm sorry but I don't understand how this answers my question.

Thanks,