This week I encountered a problem on how to display the update set picker for Scoped Applications, specifically HR in Istanbul. After much investigation, I was able to make it visible. Note that the example application I have used is HR but this applies to any scoped app and the developer/scoped app admin does not have the admin role.

Below are the steps I did to make it feasible, again using the HR as an example:

A couple of things to do first…

1. Your HR admins must have the following roles. Hopefully, you are putting them in a group and the group has the roles:
   
   • sn_hr_core.admin
     
   • sn_hr_sp.admin
2. Ensure that you give them delegated developer access for HR and HR Portal. Doing so will allow them to see the applications for HR Core and HR Portal in the application picker (see screenshot below). Below are the steps if you don't know how to do this:
   
   • *
3. Go to System Applications > Applications
4. Depending on the application, you may have to go to Downloads tab or Develop tab. For HR, go to Downloads.
5. Look for Human Resources: Core
   
   1. Open the application
      
   2. Under Related Links, click Manage Developer
      
   3. In the modal window, click Groups (I hope you manage this by groups and not users)
      
   4. Find the HR Admin group and click the group name
      
   5. Pick the permissions you want to grant them. I picked all as they need to manage the entire app anyway.
      
   6. Click Save
      
      • 
6. Follow the steps 1 — 5 but look for Human Resources: Service Portal

Now the fun stuff. To give them access to the access picker you will need to grant them permissions to the table first then give them ability to view it in the left navigator and then grant them ability to use the Update Set Picker.

1. Create a new role: update_set_picker
2. Add this new role to:
   
   • Admin
     
   • sn_hr_core.admin
     
   • sn_hr_sp.admin
3. Create ACLs

Table Name	Operation	Description	Requires role
sys_remote_update_set	create	update_set_picker role required to create Remote Update Set records	update_set_picker
sys_remote_update_set	read	update_set_picker role required to read Remote Update Set records	update_set_picker
sys_update_set	create	update_set_picker role required to create Update Set records	update_set_picker
sys_update_set	read	update_set_picker role required to read Update Set records	update_set_picker
sys_update_set	write	update_set_picker role required to write Update Set records	update_set_picker
sys_update_set_log	create	update_set_picker role required to create Update Set Log records	update_set_picker
sys_update_set_log	read	update_set_picker role required to read Update Set Log records	update_set_picker
sys_update_set_log	write	update_set_picker role required to write Update Set Log records	update_set_picker

1. Edit the Update Set Application. In Istanbul, you can edit an application and module directly by clicking the pencil icon.
   
   1. Look for System Update Sets
      
   2. Click the pencil icon
      
   3. In the Roles, add update_set_picker
      
   4. Click Update
      
   5. Look for System Update Sets > Update Sources
      
   6. Click the pencil icon
      
   7. In the Visibility tab, click the pencil icon for Roles, add update_set_picker
      
   8. Click Update
2. Edit the Retrieved Update Set list to allow update_set_picker roled users to Import Updates Sets via XML
   
   1. Go to System Update Sets > Retrieved Update Sets
      
   2. Scroll down to Related Links.
      
   3. Right click on Import Update Set from XML and click Edit UI Action
      
   4. Inactivate the Out of the Box UI Action. Right click on the header and Save
      
   5. Click Active, to activate it again.
      
   6. In the condition field add the following: (gs.hasRole('admin') || gs.hasRole('update_set_picker'))
      
   7. Right click on the header and click Insert.
3. Set-up to allow the update_set_picker roled users to see the Update Set Picker
   
   1. Go to sys_properties.list
      
   2. Create New
      
      • Name: glide.ui.update_set_picker.role
        
      • Type: string
        
      • Value: update_set_picker
        
   3. Click Save

Steps to Test:

1. Login as a user with the sn_hr_core.admin role only
2. Click the Settings icon
3. Click Developer.

Expected Results:

· The Update Set field should be visible and Show Update set picker in header switch

· When Show Update set picker in header switch is on, the Update Set field should be visible in the header of the platform.

Labels:

• Platform and Cloud Security