How to import custom fields from SLM into the SNOW AP?

AshishP asked a question.

November 10, 2021 at 2:24 PM

Hi Folks,

I have created custom fields as "Title" and imported data from AD. Also, created "Category" as per employee title. Now, I want to fetch the same information into the SNOW AP to strict access for services.

I want to restrict access to services as per "Category". Is it possible use category under permission? If yes, could you please guide to fetch the custom details from SLM. Also, help me to enable permissions to category.

Top Rated Answers

Community Manager (Flexera Software)
5 years ago
All permissions in AP needs to be related to an AD group or an AD user. It might be possible to set permissions on the import per service if you trace the api calls that are being made when you do it manually (I have not tried that personally). But still, I am not sure that is enough because in your case you would still need to create a Role in AP for "Knowledge manager". That role needs to be connected to either an AD group or a number of AD users.
Expand Post
Selected as Best

All Answers

Community Manager (Flexera Software)
5 years ago
Hi

It is not possible to restrict access on category level, only on a service level. If a user has access to a service, he/she will also see the category automatically. If they do not have access to a service placed in a certain category, this will not see the category.
Expand Post
- AshishP
  5 years ago
  Hi @Joakim_locked Johansson(Retired),
  
  I want to restrict access to services but as per our own category (which we created under SLM as custom field). I think we can restrict access as per AD role. We don't want to use AD role here. Rather we want to use Category. Is it possible to use under permissions tab under services?
  Expand Post
  - Community Manager (Flexera Software)
    5 years ago
    Could you provide a real world example? Not sure I am following what you want to achieve then.
    Expand Post
  - AshishP
    5 years ago
    Hi Joakim @Joakim_locked Johansson(Retired),
    
    I am creating Personas as "Knowledge Manager", "Developer Power User", etc as per Employee Designation. Already created these under SLM. Just want to import into the SNOW AP. Now, I want to grant permissions to Services as per Personas. I want to display only limited applications.
    
    For example,
    Knowledge Manager: Want to grant services only to "Microsoft 365 E5", Adobe Acrobat Reader DC, SnagIt, Kofax Power PDF Standard, etc.
    Developer Power User: Want to grant services only to "Microsoft 365 E5", Adobe Acrobat Reader DC, SnagIt, Kofax Power PDF Standard, MS Visio Standard, MS Visual Studio Enterprise, etc.
    
    These Personas are not available in AD. We created as per our requirement and import as a custom values. I want to give permissions to the services as per Personas. How can I complete this requirement? Is it possible to grant access as per Personas?
    
    Expand Post
  - AxelLa
    5 years ago
    We had this requirement 4 years ago already for one of our larger customers.
    
    In this case, we wanted to restrict service access based on costcenters.
    Basically: software can only be used by the department that has paid for it.
    
    Some ideas were discussed internally how to implement this, but it never happened.
    Expand Post
  - AshishP
    5 years ago
    Hi Axel @Axel Lamparth,
    
    Is it not possible to implement in the SNOW AP as per our requirement?
    Expand Post
  - Community Manager (Flexera Software)
    5 years ago
    All permissions in AP needs to be related to an AD group or an AD user. It might be possible to set permissions on the import per service if you trace the api calls that are being made when you do it manually (I have not tried that personally). But still, I am not sure that is enough because in your case you would still need to create a Role in AP for "Knowledge manager". That role needs to be connected to either an AD group or a number of AD users.
    Expand Post
    Selected as Best
  - AxelLa
    5 years ago
    Hi @Ashish Patil,
    the simple and sad answer is "no".
    Expand Post