Skip to main content

ServiceNow dynatraceapi user getting logged out due to ACL permissions - steps to diagnose

 



- I located the error by viewing the flows from the 'Link to execution' list under 'Alert Execeutions' here:

/em_alert_management_rule.do?sys_id=7f5e284e07032010b1306a77c4a93523


- Click through to any of the links to execute references the flow designer and you will then see under Action 6:
'The requested flow operation was prohibited by security rules'
- You can review the flow operation and attempt to impersonate the dynatraceapi user with the ACL debugging tools turned on and see if you can find the ACL restricting the user.
- Please refer to our following Docs:
KB1008036 - ACL troubleshooting reference
KB1008035 - ACL debugging tools

Please let me know how you get on with this and if leaving the 'SGO-Dynatrace' alert management rule inactive stops the lockout and your alerts are still working as intended for your organisation we could potentially close out this case unless you require further information.


Comments

Post a Comment

Popular posts from this blog

URL link in addInfoMessage

var ga=new GlideAjax('gld_HR_ajax'); ga.addParam('sysparm_name', 'checkEmployeeNumber_hrProfile'); ga.addParam('sysparm_hrprofilenumber', g_form.getValue('number')); ga.addParam('sysparm_employeenumber', newValue); ga.getXMLAnswer(function(answer) { if (answer!='undefined' && answer!=''){ var navURL="<a style='text-decoration:underline;color:blue' href=hr_profile.do?sysparm_query=number=" + answer + ">" + answer + "</a><img width='3' src='images/s.gif'/>"; var sMsg='The employee number entered already exists on another HR Profile ' + navURL; //alert(sMsg); g_form.showErrorBox('employee_number', 'error - please check'); g_form.addInfoMessage(sMsg); } });
2 comments
Read more

GlideRecord setValue

setValue(String name, Object value) Sets the specified field to the specified value. Normally a script would do a direct assignment, for example,  gr.category = value . However, if in a script the element name is a variable, then  gr.setValue(elementName, value)  can be used. When setting a value, ensure the data type of the field matches the data type of the value you enter. This method cannot be used on journal fields. If the value parameter is null, the record is not updated, and an error is not thrown https://developer.servicenow.com/app.do#!/api_doc?v=madrid&id=r_GlideRecord-setValue_String_Object
2 comments
Read more