Lab 4.2.1 Create Access Control

[zamriy]

hi,

i have a question wrt the steps to Establish ACL Rules for the Incident table for this particular lab.

i have tested the same steps on Xanadu and Zurich instances and both platforms yielded the same results. even after creating the ACL rules for the Incident table so that only the users with role = 

u_holographic_handheld_hhd_user could read, write and create an incident where Service offering is set to Infinity (HHD), i found that ITIL users could still read, write and create and incident where Service offering is set to Infinity (HHD). even the lab does not ask to validate these changes. i checked the outcomes out of curiousity. 

i believe these were replicable for those who did the same lab

perhaps someone could confirm this and help me to correct this if there are missing steps for the lab involved.

many thanks,

[Mark Manders]

ITIL users have access to any incident, unless they are configured not to. That you allow another role to also create/write/read incidents for a certain SO, doesn't make it so ITIL users can't. You will need to add a deny-unless ACL for that to work.

[Dr Atul G- LNG]

Hi @zamriy 

https://www.servicenow.com/community/itsm-forum/servicenow-administration-lab-4-2-1/m-p/3259999