in Service Manager

SLA icons & Service Level Target time not visible to members of scoped/restricted SCSM user roles

I recently wrote a post about how to create custom views with SLA icons and Service Level Target column. After writing this post I realized, that if a user is member of a scoped/restricted user role, he would not be able to see the SLA icons and Service Level Target times. I noticed that not only custom views are affected by this issue. This happens too for default SCSM views which display SLA icons and Service Level Target column, like the “Assigned To Me” view for Incidents as well as for Service Requests.

It seems pretty strange, but I was able to reproduce the issue multiple times by restricting Incident Resolvers, Service Request Analysts as well as Advanced Operators user roles. As long as there are no restrictions on a user role, everything works fine. But if for example the user role is restricted to only allow access to a specific Catalog Group, icons and Service Level Target times will no more be visible for members of this user role.

As a reply to my question on Technet forums, Patrick Massie mentioned that this issue can be resolved by creating a All Service Level Configuration items group and assigning that group to the scoped user role. Thanks for pointing me to the right direction Patrick, that does the trick!

As Patrick mentions in his forum reply, within the Incidents, on the Service Level tab, the Time before SLO Breached just shows a hyphen instead of the remaining time. As described below, this can be resolved too by creating another configuration item group and selecting ServiceManager.Calendar.Projection combination class. The following steps will describe how to create the necessary groups.

Within Service Manager you can use groups to logically group and manage configuration items. Groups can contain either CIs of the same class or mixed classes. They can be either static by manually adding certain CIs or dynamic by specifying rules to include CIs. We are going to use the latter one to create our groups.

First of all, create a new Config Item group which includes all Service Level Configuration items

Service Level Configuration Items Group

As Patrick mentions in his forum reply, within the Incidents, on the Service Level tab, the Time before SLO Breached just shows a hyphen instead of the remaining time. This behavior is normal for Service Level Instance Time Information objects which have their status not equal to Active. However in this case the status is Active and you should see the time remaining before the SLO breaches.

Incident Time Before SLO Breached

To resolve the above problem, create another new Config Item group where you specify the ServiceManager.Calendar.Projection combination class.

Service Manager Calendar Projection Items Group

Assign both groups to your scoped user role and members of this role should finally be able to see SLA icons, Service Level Target time as well as time remaining before the SLA is breached. Make sure you do not uncheck your other CI groups to which you want to provide access.

Edit User Role Config Item Groups

Write a Comment

Comment

  1. Another solution on the same track is to create a separate role (of the same type) just granting access to the SLO objects as per above. That way one doesn’t have to keep track of other roles (that may have completely different purposes).

Webmentions

  • Create custom View with SLA icon and Service Level Target column | scsmlab March 27, 2015

    […] SLA icons & Service Level Target time not visible to members of scoped/restricted SCSM user roles […]