How to Prevent Downloading of Files to Personal/Unmanaged Devices

[cmitchell2323]

Good Afternoon Everyone,

I work for an organization that is trying to implement a solution to prevent users from downloading ServiceNow files to their personal/unmanaged devices. Here is a scenario:

• UserA wants to acccess ServiceNow through their personal desktop. They navigate to our ServiceNow URL, authenticate via our IdP, and then log in.
• UserA is now able to navigate to any record (i.e. a TASK with an attachment) and download that attachment to their personal device

Based on the above scenario, we do not want this situation to occur. Does ServiceNow provide any way to restrict this? I have been brainstorming and so far, I have thought of potentially using IP Address Access Controls with the following condition: If a user is on managed device (which could be extracted via IP address), then downloading files is allowed, but if a user is on an unmanaged device, file downloading is not allowed.

[Tanushree Maiti]

Hi @cmitchell2323 

Create ACL on Sys_atachment to restrict user to download

Refer: 

https://www.servicenow.com/community/developer-forum/i-want-to-prevent-users-from-downloading-case-a...

https://www.servicenow.com/community/developer-forum/how-to-restrict-users-to-download-attachments/m...