How to run a flow as user and still create a SC task record and display variables in the variable editor - Support and Troubleshooting

How to run a flow as user and still create a SC task record and display variables in the variable editor Description For the latest information, see Create a flow with roles .

When a non-admin user orders a catalog item that calls a flow to create a catalog item you will see the below error - The requested flow operation was prohibited by security rules. Flow can not create service catalog task when it's initiated by an ITIL user

STEPS TO REPRODUCE:

create a flow for a catalog item add a "create catalog task" action add cat item variables to sc task set the flow to run as "user who initiates session" impersonate "ITIL user" Submit catalog item Cause This is the expected behavior

An ACL is preventing the catalog task from being created name: sc_task, operation: create, required role: catalog_admin /sys_security_acl.do?sys_id=1c494140db960010c28f5223dc9619fa

Resolution Add the catalog_admin role as role to the flow. See Create a flow with roles. Change the flow to Run As "System" or modify the above ACL so users without catalog_admin can create [sc_task] records, in this case itil alternatively, you can add the role to the SC flow, starting in Paris set the flow to run as user, and add a role (in this case itil) to the flow if you're setting your roles on flow, to display variables you will need to add a create & write ACL on the table [sc_item_variables_task] with the required role (in this case itil)