In ServiceNow, Access Control Rules (ACLs) determine who can create, read, write, delete, or execute records within a table. Each ACL rule evaluates three main permission requirements, all of which must be true for the rule to apply. These requirements are:
1. Conditions (A - Correct Answer)
The Conditions field in an ACL specifies predefined logic that must be met for the rule to apply.
Example: An ACL might specify that a record is only accessible if the State field is set to "Open".
Conditions are evaluated first before checking roles or scripts.
2. Roles (C - Correct Answer)
ACLs can be restricted to users with specific roles.
If a user does not have the required role(s), the ACL denies access.
Example: Only users with the "itil" role can edit incidents.
If the ACL does not specify any role, all users may be eligible based on conditions and script evaluations.
3. Script (D - Correct Answer)
ACL scripts provide advanced conditional logic using server-side JavaScript.
Scripts allow complex rule evaluation, such as checking whether a user is the record's creator.
Example: A script could restrict access to records where current.requested_for == gs.getUserID() (only allow users to see their own requests).
If a script is present in an ACL, it must return true for access to be granted.
Why "A. Conditions," "C. Roles," and "D. Script" are the Correct Answers?
Access control rules are only granted when all three evaluations return true.
Conditions act as filters.
Roles define permissions based on user roles.
Scripts allow advanced access logic.
Explanation of Incorrect Options:
B . Table - Incorrect
Access control applies to specific tables, but defining a table itself is not one of the permission checks.
E . Table." - Incorrect
This is an incorrectly formatted option and does not relate to access control evaluation.
F . Table.none - Incorrect
"Table.none" is not an evaluation factor in ACLs. Access control applies to table-level, field-level, and record-level, but "table.none" is not an access requirement.
Reference from Certified System Administrator (CSA) Documentation:
ServiceNow Docs: Access Control Rules (ACLs) Overview
ServiceNow CSA Study Guide - Security and Access Control
ServiceNow Product Documentation: Evaluating ACLs and Permissions