In ServiceNow,Access Control Rules (ACLs)determine user permissions for accessing tables, records, and fields. The evaluation order follows a structured hierarchy to ensure security and proper access control enforcement.
Table-Level Access Control- The system first checks if the user has access to the table. If the user does not have access at the table level, field-level ACLs are not evaluated.
Field-Level Access Control- If table access is granted, the system evaluates field-level access. A user must pass both the table-level and field-level conditions to access specific fields.
Row-Level Access- If there are row-level ACLs (e.g., access based on record ownership), they are also evaluated.
A: Ensures user has access to the fields in a table, before considering their access to the table- Incorrect because table access is evaluated first, not field access.
B: Ensures user can get to work as quickly as possible- Access controls prioritize security over speed, so this is not the primary result of ACL order evaluation.
C: Ensures user has access to the application, before evaluating access to a module within the application- Application access is controlled separately from ACLs and does not follow the same hierarchy.
Reference:ServiceNow KB0541355 - Access Control Evaluation Order