Hi all,
Is there a way to remove access profiles from being requested or removed via the ServiceNow integrated catalogue item? Ideally without customising the integration itself. The idea is for users to only manage their roles, not access profiles as we only use the roles for requesting.
Thanks!
Not without modifying the widget itself to exclude access profiles. You could possibly try adding an additional query parameter to the access profile search in the config screen
Maybe something like
AND requestable:false
Since access profiles cannot be NOT requestable, that should theoretically always return 0 access profiles
1 Like
If you go the widget modification route, it’s not difficult, and when you are in there you can correct some of the bootstrap grid layouts.
The only downside of modifying the widget is when you need to upgrade the app to the latest version. I’ve had a hard time getting everything updated without uninstalling it and reinstalling it… it seems to skip too many updates and I can’t figure out how to get it to apply them
Hey all, thanks for your help with this. I just got confirmation from Sailpoint support that while the solution works for access requests to add access, it doesn’t work for removals.
"You can add below query to prevent listing of Access Profiles under Add access
Under Setup–>Additional query for fetching list of access profiles
AND requestable:false
However currently there is no way to prevent listing of access profiles under Remove Access tab (if they are requestable on IdentityNow same behaviors will be reflected in ServiceNow)"