Notifications

256 views

Description

When moving an update set from one instance to another via export XML getting the following preview error.

 "Cannot commit Update Set '<update_set_name>' because: Update scope id 'global' is different than update set scope id 'global'. Resolve the problem before committing."


Cause

The XML exported from the update set is missing the <application> element right below the XML element <sys_update_set action = "INSERT_OR_UPDATE>

Correct XML should look like 

<sys_update_set action = "INSERT_OR_UPDATE>

<application display_value="<application_name>"><sys_id></application>

Incorrect XML should look like

<sys_update_set action = "INSERT_OR_UPDATE>


This behavior is caused due to the below two ACLS on sys_package.name that are created by plugin com.glide.kmf.global which could have been installed when plugin Instance Data Replication (com.glide.idr) was installed.

https://<instance_name>.service-now.com/sys_security_acl.do?sys_id=c28ed511db230010ae05f4331f961911&sysparm_record_target=sys_security_acl&sysparm_record_row=5&sysparm_record_rows=6&sysparm_record_list=nameCONTAINSsys_package%5EORDERBYname

https://<instance_name>.service-now.com/sys_security_acl.do?sys_id=c28ed511db230010ae05f4331f961911&sysparm_record_target=sys_security_acl&sysparm_record_row=5&sysparm_record_rows=6&sysparm_record_list=nameCONTAINSsys_package%5EORDERBYname


Resolution

Add the roles required by the ACL to the user profile.

Roles required by the ACLs are

sn_kmf.cryptographic_manager
sn_kmf.cryptographic_auditor

Alternately, rather than add the roles to the admin role, you can set 'admin overrides' = true on the ACLs as explained in KB0819224:

  1. Elevate your admin role to security_admin.
  2. Navigate to each of these two read ACLs, one for sys_app and one for sys_package.name.
  3. Check the 'Admin overrides' checkbox and Click Save.

https://hi.service-now.com/kb_view.do?sysparm_article=KB0819224

Article Information

Last Updated:2020-06-01 11:51:09
Published:2020-06-01