Deny Unless Acl Use Case from Xanadu Release

We all know HR scope is very protected and secured in terms of security. To secure HR records for a group member ServiceNow provides us COE Security Configuration. In COE Security Configuration, we can select our group and based on added group it will show or hide the records.

But have you ever thought of controlling visibility per records?

Well we can do this using ServiceNow new feature called Decision type field on Acl and it is very easy to setup with this new feature.

What will happen:

You can define the visibility of case to users and only those users will be able to see that particular records. You can also undo this configuration any time and record will be visible to everyone.

Steps to Configure:

1. Create a field
   Table: sn_hr_core_case
   Type: true/false
   Name : Secure this Record to Assigned to & Collaborators
   Additional Steps : Configure HR case for layout and add it below collaborators field.
2. Create a Ui Policy
   Table: sn_hr_core_case
   Name: Hide “Secure this Record to Assigned to & Collaborators” field is assigned to and collaborators are empty
   Condition: Assigned to is empty and collaborators are empty
   Inherit: true
   Note: The purpose of this UI policy is to ensure that the “Assigned To” and “Collaborators” fields are never left empty.
3. Configure Ui policy action for above created ui policy
   Field: Secure this Record to Assigned to & Collaborators
   Visible: false
4. Create Acl(Most awaited configuration 😋)
   Refer below attached screenshot

Note: Added assigned to manager in case if assigned to and collaborators both are out sick or for some another reason.

— — — — — — — — — — — —Demo video — — — — — — — — — — — — —

Happy learning,
Thanks,
Nisha