Access Control List
1. What is ACL?
Ans: By using ACL we can restrict the table level and column level data.
ACL is access control list that defined what data a user can access & how
they can access it is ServiceNow.
2. What are the types of ACL’s?
Ans:
1.Table.none,
2. Table.field,
3. Table.*,
4. *.*
3. What are the operations of ACL’s?
Ans: Read, Write, Create, Delete
4. What do you mean by star-dot-star in ACL’s (*.* in ACL)??
Ans: *.* It means the first star represents all tables and the second star
represents all fields on those table.
5. How to Create a New ACL?
Ans:
⇒ Elevate role to "Security Admin"
⇒ Navigate System Security > Access Control (ACL)
⇒ Click New
⇒ Select the table and add the agent role for which you are granting access.
⇒ Submit.
6. What is ACL and what are * and None ?
Ans:By using ACL we can restrict the table level and column level data.
table.none is table level ACL
table.* is field level ACL which restrict all fields access
7. Can you restrict the visibility of records apart from ACL ?
Ans: Yes we can restrict from query Business rules.
8. What is Table.none , Table.* ?
Ans: Table.none – It works on table level access
Table.* - It works on field level access-
9. What is the execution order of the ACL’s?
Ans: Role → Condition → script
10. What is the role required to create an ACL ?
Ans: security_admin
11. What type of ACL’s will automatically create when you create a table?
Ans: 4 table.None ACL’s will create with Read,write,create,Delete Operation.
12. Can we configure ACLs being admin?
Ans: No, we need to elevate Security Admin role to configure ACL.
13. What is an admin override in the ACL?
Ans: If the admin override checkbox is true for an ACL, it means that the
ACL will not be applied to the user with the admin role.
14. Can anyone explain the order of ACL evaluation in servicenow?
Ans: When working with ACLs, it is extremely important to note that the
order in which an ACL definition is evaluated has performance
implications. These are:-
1.Roles
2.Condition
3.Script
15.
16. If I write ACL for number field as read-only at the same time if write UI
policy as not read-only means editable what will happen?
17. When ACL is applied over the update and delete actions, then which
one gets executed first?