CSA Access Control Rules (ACLs) 4

Question 1

A field ACL exists for 'incident.caller_id' with the read operation. What does this ACL specifically control?

Accepted Answer

Whether the Caller ID field appears on the Incident form

Answer

A field-level read ACL on 'incident.caller_id' controls visibility — whether users can see the field's value on forms and lists.

Question 2

What happens to a field protected by a write ACL that a user fails?

Accepted Answer

The field appears but is read-only for that user

Answer

When a user fails a field-level write ACL, the field remains visible but becomes read-only — they can see but not edit the value.

Question 3

Which ACL name format would restrict access to the 'priority' field on the Problem table?

Accepted Answer

problem.priority

Answer

Field-level ACLs in ServiceNow use the format 'table_name.field_name', so 'problem.priority' targets the priority field on the Problem table.

Question 4

What is the function of the 'gsftNavigation.openRecord' check in ACL scripts?

Accepted Answer

It is not a valid function in ACL scripts

Answer

'gsftNavigation.openRecord' is not a recognized ACL script function; ACL scripts use GlideRecord methods and standard ServiceNow APIs instead.

Question 5

When troubleshooting ACL issues, what does the Security Debug plugin provide that standard logging does not?

Accepted Answer

Real-time display of which ACLs are being evaluated for each request

Answer

The Security Debug plugin adds a debug panel showing exactly which ACLs are evaluated and whether they pass or fail for each page load or record access.

(CSA) ServiceNow System Administrator Certification Practice Test

(CSA) ServiceNow System Administrator Certification Practice Test

CSA Access Control Rules (ACLs) 4