The object name for a rule that applies to the entire Incident table is incident .* , which means any field on the incident table. The other options are not valid object names for access control rules. ReferencesAccess control list rulesAccess Control List in ServiceNowAccess Controls