pa_power_user is able to add an indicator to data collector from guided indicator process - Known Error

pa_power_user is able to add an indicator to data collector from guided indicator process Description When a user with the pa_power_user role is following through the "Create New Indicator" guided process, this pa_power_user is able to attach this new indicator to a data collector job. This indicator can't be removed by the pa_power_user as they do not have access to data collectors, and this new indicator doesn't seem to be temporary to this job.

Steps to Reproduce

1. Hop into an instance. 2. Impersonate a user with pa_power_user role, and make sure no other admin or PA role is assigned. 3. Navigate to Performance Analytics -> Indicators -> Create New ( https://{INSTANCE}.service-now.com/nav_to.do?uri=%2F$pa_indicator_wizard.do ) 4. Follow guided process: a. General - Name = PA Test b. Data Source - Indicator source = Incidents.Open c. Data Collection - Job = [PA Analytics] Daily Data Collection 5. Click "Apply". 6. Stop impersonating the pa_power_user (At this point, pa_power_user can't see Data Collectors.) 7. Navigate to Performance Analytics -> Data Collector -> Jobs 8. Click into [PA Analytics] Daily Data Collection - Notice that this Data Collector has this new Indicator assigned to it. The pa_power_user is not able to remove it, and this isn't temporary.

Workaround This is expected behavior and by design in all currently supported releases.

Additional Information A Temporary Data Collection can be launched as part of an automated indicator setup, in order to gather multi-day data for new Automated Indicators created via the Guided Indicator Workflow. A power user is able to run a temporary data collection job as part of the indicator setup.

It's expected that the pa_power_user should not be able to access job related configurations. However, when we are creating an indicator through a guided indicator process, it allows pa_power_user to associate the indicator to a data collection job so that the scores are collected for this indicator from this point forward in the future according to the configuration of the job

Also, when you enable to collect data from the past, a temporary data collection job is created to collect scores in the past, and this temporary job is deactivated by default, not causing any further executions.