Users that do not have these two permissions will see the respective forms in IT Services category of Service Catalog (Submit Request menu item).
ServiceDesk.Service.Items.NetworkShare (Can access the Request Access to Network Share item in the service catalog)
ServiceDesk.Service.Items.ResetPassword (Can access the Reset Password item in the service catalog)
Perhaps most noticeably, All Users group by default does not have these permissions set, yet users in All Users group will still see Request Access to Network Share and Reset Password items.
In Service Catalog configuration, access to these two items is given by ServiceDesk.Services.Categories.It permissions as well as the specific permissions, so anyone who has access to IT Services category in Service Catalog will see these items.
Remove ServiceDesk.Services.Categories.It permissions entry from both of these Service Catalog Items.
Log into ServiceDesk Portal with an administrator user
Navigate to Admin > Service Catalog Settings
Go to IT Services category
Click on the lightning bolt icon next to the Request Access to Network Share / Reset Password item and select Edit Form
In permissions tab, remove the ServiceDesk.Services.Categories.It entry.
Note that after removing these, you will need to add the permissions mentioned above to the user groups that do need access to these forms.
This issue has been addressed in ServiceDesk 8.0 and newer.
NetworkShare and ResetPassword permissions under ServiceDesk.Services.Items do not control access to the respective forms as expected.
Imported Document ID: TECH208708
Subscribing will provide email updates when this Article is updated. Login is required.