Create user criteria for controlling access to knowledge bases and articles

Roles to match the user criteria. Note:

• Because the evaluation of a role is cached in the session, any change in the role requires you to log in again.
• User criteria are not applicable for elevated privilege roles.

Script to define any additional user criteria that returns true or false. This field is available when the Advanced option is selected on the User Criteria form. Note:

• A script is evaluated in the scope that the user criteria are created in.
• The evaluation of a script is cached in the session, so any change in the evaluation requires you to log in again. If a scripted user criterion is defined for a knowledge base, user access to knowledge bases is evaluated once per session. If the script results in changes after a session cache is built, the result takes effect in the next session.
• Don’t use gs.getUser() or other session APIs because they cause conflicts when used in diagnostic tools. Use the predefined user_id variable available in the script to get the user ID of the user being used to evaluate the script.
• Scripts are evaluated dynamically. Therefore, including scripts in a user criteria can impact performance.

Option to determine whether all elements from each populated user criteria field must match. If selected, only users who match all user criteria are given access. If cleared, the user must meet one or more of the set user criteria to be given access. By default, this check box is cleared so that any condition met provides a match.

For example, consider a user criteria record for the following:

• Locations A or B
• Company C or D With Match All selected, only users that meet all of these conditions are matched. For example, a user with a location A and a company C.

If Match All isn’t selected, users meeting any of these conditions are matched. For example, a user with a location B.

Note: If you select Match All, ensure that you don't create contradictory conditions that can never be met. For example, if all users in location A work for company G, the conditions in this example can never be met.