In ServiceNow,Access Control Rules (ACLs)determine who cancreate, read, write, delete, or executerecords within a table. Each ACL rule evaluates three main permission requirements,all of which must be truefor the rule to apply. These requirements are:
TheConditions fieldin an ACL specifies predefined logic that must be met for the rule to apply.
Example: An ACL might specify that a record is only accessible if theStatefield is set to "Open".
Conditions areevaluated firstbefore checking roles or scripts.
ACLs can berestricted to users with specific roles.
If a user does not have the required role(s), the ACL denies access.
Example: Only users with the"itil"role can edit incidents.
If the ACL does not specify any role, all users may be eligible based on conditions and script evaluations.
ACL scripts provideadvanced conditional logicusingserver-side JavaScript.
Scripts allow complex rule evaluation, such as checking whether a user is the record’s creator.
Example: A script could restrict access to records wherecurrent.requested_for == gs.getUserID()(only allow users to see their own requests).
If a script is present in an ACL, it must returntruefor access to be granted.
Access control rules are only granted when all three evaluations return true.
Conditions act asfilters.
Roles definepermissions based on user roles.
Scripts allowadvanced access logic.
1. Conditions (A - Correct Answer)2. Roles (C - Correct Answer)3. Script (D - Correct Answer)Why "A. Conditions," "C. Roles," and "D. Script" are the Correct Answers?
B. Table – Incorrect
Access control appliesto specific tables, but defining a table itself is not one of the permission checks.
E. Table." – Incorrect
This is anincorrectly formatted optionand does not relate to access control evaluation.
F. Table.none – Incorrect
"Table.none" is not an evaluation factor in ACLs. Access control applies totable-level, field-level, and record-level, but "table.none" is not an access requirement.
Explanation of Incorrect Options:
ServiceNow Docs: Access Control Rules (ACLs) Overview
ServiceNow CSA Study Guide – Security and Access Control
ServiceNow Product Documentation: Evaluating ACLs and Permissions
References from Certified System Administrator (CSA) Documentation:
