Itil role has write and delete permission for CMDB Health Orphan rule in CI Class manager, which is not expected - Known Error

Itil role has write and delete permission for CMDB Health Orphan rule in CI Class manager, which is not expected Description Itil role has write and delete permission for CMDB Health Orphan rule in CI Class manager, which is not expected. According to design as in doc below: itil has read access, itil_admin (on top of itil) has full access, as documented below: https://docs.servicenow.com/bundle/paris-servicenow-platform/page/product/configuration-management/task/t_CreateCMDBHealthOrphanRule.html

Steps to Reproduce

1> hop on OOB instance

2> open CI Class Manager, select Application Service, under Health > Correctness > Orphan Rule > create a new rule

3> impersonate ITIL User

4> open CI Class Manager, select Application Service, under Health > Correctness > Orphan Rule > you can update existing rule, or delete it.

5> once deleted, click on new, all fields are greyed out

Also user cannot do anything directly from the table cmdb_health_orphan_rule.

Workaround There is no known workaround for this issue. If you are able to upgrade, review the "Intended Fix Version" section below below to determine the versions that have a permanent fix.