Catalog visibility restriction for Agents

Aparna_ravi
Giga Contributor

‎05-09-2025 03:22 AM

Today the queries received from our HR catalogs are visible to all HR AGs. We want to create a new catalog for employees. Any queries received in this catalog should be visible only to the assigned AG only as they are confidential information. Other AGs shouldnt have visibility to this catalog cases or associated task. Can this be done for a specific catalog only without any customization? 

If so, please advise how to do it.

0 Helpfuls
  • 233 Views
1 REPLY 1

connorlyons
Kilo Sage

‎05-09-2025 07:00 AM

Hi @Aparna_ravi,

 

  1. Create a New HR Catalog
    • Navigate to HR Administration > HR Services > HR Catalogs
    • Create a new catalog, e.g., Confidential Employee Services
  2. Create or Update the HR Services Under That Catalog
    • Assign each HR service to this catalog.
    • Ensure each HR service is mapped to the correct Assignment Group and Case Template.
  3. Configure HR Criteria for Visibility
    • Go to HR Administration > HR Criteria
    • Create a new criteria, e.g., Confidential Case Access - AG Only
    • Define it to only allow members of the assigned AG access.
    • Note: Out-of-the-box, HR criteria is evaluated based on user attributes. For dynamic evaluation of assigned AG, minimal scripting or ACL tuning may be needed

  4. Restrict Read Access via ACLs (Optional if HR Criteria is insufficient)

    • If HR Criteria doesn’t restrict visibility adequately by itself, you can:

    • Go to System Security > Access Control (ACL)

    • Filter on table: sn_hr_core_case

    • Edit the read ACL

      • Add a script condition:
        • var gr = new GlideRecord('sn_hr_core_case');
          gr.get(current.sys_id);
          gs.hasRole('sn_hr_core.basic') && gs.getUserID() == current.assignment_group.manager;
        • OR
        • current.assignment_group == gs.getUser().getMyGroups();

Best,

Connor Lyons

Consultant at Infocenter

CSA | CAD | 15x CIS

LinkedIn

Please mark answer correct and/or helpful for others reading this with the same issue/question.

0 Helpfuls