Skip to page contentSkip to chat
ServiceNow support
    • Community
      Ask questions, give advice, and connect with fellow ServiceNow professionals.
      Developer
      Build, test, and deploy applications
      Documentation
      Find detailed information about ServiceNow products, apps, features, and releases.
      Impact
      Accelerate ROI and amplify your expertise.
      Learning
      Build skills with instructor-led and online training.
      Partner
      Grow your business with promotions, news, and marketing tools
      ServiceNow
      Learn about ServiceNow products & solutions.
      Store
      Download certified apps and integrations that complement ServiceNow.
      Support
      Manage your instances, access self-help, and get technical support.
How to configure Group Members (sys_user_grmember) edit capability, so that only the Group Manager is able to Edit the Groups so as to Add/Remove members from Group - Support and Troubleshooting
  • >
  • Knowledge Base
  • >
  • Support and Troubleshooting (Knowledge Base)
  • >
  • How to configure Group Members (sys_user_grmember) edit capability, so that only the Group Manager is able to Edit the Groups so as to Add/Remove members from Group
KB0723786

How to configure Group Members (sys_user_grmember) edit capability, so that only the Group Manager is able to Edit the Groups so as to Add/Remove members from Group


11961 Views Last updated : Apr 7, 2024 public Copy Permalink English (Original)
  • English (Original)
  • Japanese
KB Summary by Now Assist

Issue

This article demonstrates how to configure Group Members (sys_user_grmember) edit capability, so that only the Group Manager is able to edit (as in add/remove) members from the group.

Release

All releases

Resolution

Please keep in mind that this article falls beyond the scope of support as it is a customized implementation. Below are just suggestions for reference which we have provided here to help solve similar issues.

  1. Create (or modify) the three record ACLs for table sys_user_grmember as per below:

    1.1 Configure a READ ACL for sys_user_grmember table
    1.2 Configure a WRITE ACL for sys_user_grmember table
    1.3 Configure a DELETE ACL for sys_user_grmember

    2. All above ACLs can have the same script code as per below: 
    var answer = false;
    if( (gs.hasRole('user_admin')) || (current.group.manager == gs.getUserID() ) )
    { answer = true; }
    3. Configure a CREATE ACL for sys_user_grmember, since adding group member involves the many to many relationship on the saved record when using slushbucket.

    Below is the code suggestion to make the CREATE ACL work:
    var answer = validate();
    function validate(){
    if( gs.hasRole('user_admin') ) {
    return true;
    }
    else{
    var manager = current.group.manager;
    if(manager !='' && manager == gs.getUserID())
    { //check in current relationship
      return true;
    }
    else { //check in parent relationship
      var parentManager = parent.manager;
      var parentName = parent.name;
      if(parentManager == gs.getUserID() )
      {
        return true;
      }
    }
    }
    }

The world works with ServiceNow.

Sign in for more! There's more content available only to authenticated users Sign in for more!
Did this KB article help you?
Did this KB article help you?

How would you rate your Now Support digital experience?

*

Very unsatisfied

Unsatisfied

Neutral

Satisfied

Very satisfied

Very unsatisfied

Unsatisfied

Neutral

Satisfied

Very satisfied

What can we improve? Please select all that apply.

What are we doing well? Please select all that apply.

Tell us more

*

Do you expect a response from this feedback?

  • Terms and conditions
  • Privacy statement
  • GDPR
  • Cookie policy
  • © 2025 ServiceNow. All rights reserved.