CSA Access Control Rules (ACLs) 5

Question 1

Which ServiceNow module allows administrators to view all ACL rules configured in the instance?

Accepted Answer

System Security > Access Control List

Answer

The Access Control List module under System Security displays all configured ACL rules in the instance for review and management.

Question 2

A user with the 'admin' role is denied access by an ACL. What is the most likely reason?

Accepted Answer

ACL denials for admins occur only in scoped applications

Answer

In scoped applications, ACLs can restrict even admin users because application scope boundaries enforce their own access rules independently.

Question 3

What is the purpose of the '*' (wildcard) table name in an ACL rule?

Accepted Answer

It creates a global fallback ACL that applies when no specific table ACL matches

Answer

An ACL with '*' as the table name acts as a global fallback, applying its conditions to any table or operation that doesn't have a more specific ACL defined.

Question 4

What does the 'Active' checkbox on an ACL rule control?

Accepted Answer

Whether the ACL is included in access evaluation for the specified table and operation

Answer

Unchecking 'Active' on an ACL effectively disables it, removing it from access evaluation without deleting the rule configuration.

Question 5

How should an administrator grant a specific user access to a table record without modifying roles or creating broad ACL rules?

Accepted Answer

Create a user-specific ACL with the user's sys_id in the script condition

Answer

A targeted ACL script condition checking gs.getUser().getID() against a specific user sys_id grants granular, user-specific record access without broader permission changes.

(CSA) ServiceNow System Administrator Certification Practice Test

(CSA) ServiceNow System Administrator Certification Practice Test

CSA Access Control Rules (ACLs) 5