Roles
Users can be granted any of the given personas on Hire2Retire IGA application on ServiceNow. It is recommended to create Hire2Retire Integration Admin as a service user in ServiceNow. Following are the user personas.
Persona | Roles |
---|---|
Hire2Retire IGA Integration Admin This user will be used for connecting Hire2Retire to Hire2Retire IGA on ServiceNow. |
x_srbtd_h2r.hire2retire_integration_admin - Write to and read from custom Hire2Retire IGA Tables on ServiceNow catalog_admin - Access to Service Catalog modules in the application navigator credential_admin - To create API key used by Hire2Retire IGA to make API requests to Hire2Retire. import_transformer - Allows users to run and manage transform maps to import and update data automatically in ServiceNow. ACL Required - This user requires a specific Read ACL for the sys_user table. (Follow the steps below to create the ACL.) |
Hire2Retire IGA Admin This user has full access to all Hire2Retire IGA pages and settings, with permissions to manage all events. |
x_srbtd_h2r.hire2retire_admin - This persona allow user access to all Hire2Retire IGA pages itil - Provides basic IT service management permissions credential_admin - To use API key for Hire2Retire IGA to make API requests to Hire2Retire. |
Hire2Retire IGA Reviewer This user will be for managers or reviewers to view and act on events, approve or reject requests. |
x_srbtd_h2r.hire2retire_reviewer - This persona allow user to review pending event on Hire2Retire IGA itil - Provides basic IT service management permissions credential_admin - To use API key for Hire2Retire IGA to make API requests to Hire2Retire. |
Hire2Retire IGA Viewer This persona can view events at observe page. |
x_srbtd_h2r.hire2retire_viewer - This role allow user to view event data |
Creating a Read ACL for the sys_user
Table¶
To allow the Hire2Retire IGA Integration Admin user to read fields from the sys_user table, you must create a Read Access Control (ACL) on that table. Follow these steps:
Steps to Create Read ACL on sys_user
Table¶
-
To create ACL, go to Navigation bar and search for Access Control (ACL).
Figure 1. Access Control in ServiceNow -
On top right corner, Click on New
Figure 2. Create user table ACLNote: If the New button is not visible, you need to elevate the role to security_admin. You can do this by using the Elevate Role option in the account profile section.
Figure 3. Elevate user role to Security Admin -
After filling the following details , Click on Submit
- Type:
record
- Operation:
read
- Name: Select the Import Set Web Service that you created in above steps. eg.
User [sys_user]
- Fields:
Select * to apply the ACL to all fields
- Role:
x_srbtd_h2r.hire2retire_integration_admin
Figure 4. New ACL creation fields - Type: