users with snc_read_only role can reset their own password on login page

[shivaD154558313]

There are users with role "snc_read_only" which makes complete read only access to the platform. In which user field "password needs reset" will be checked after every 3 months and users are forced to reset the password when they login. But with this read only access they cannot reset their own password.
I tried by adding user table to the system property "glide.security.snc_read_only_role.tables.exempt_write", But it is making the users to change their password from the user table by using set password ui action, not from the login page. When users tries to login, it is asking for current password and new password again and again.
Can anyone please help me how to achieve this?

Thanks,
Shiva

[Dnyaneshwaree]

Hello @shivaD154558313 ,

Please check below article:
https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1217247

If my solution helps you any way then mark it as accepted and helpful.

Thank You!!

[shivaD154558313]

This system property "glide.security.snc_read_only_role.tables.exempt_write" allowing access to all other user records.
It should be restricted by using ACL, When I tried to create an ACL with write access for the users with role snc_read_only and script as

if (gs.getUserID() == current.sys_id)

{

    answer = true;

}

else{

    answer = false;

}

But it not working, can anyone help me with this.

Thanks,
Shiva