Table ACL vs Field ACL

[Lisa71]

If a table ACL allows everyone to access the table, but there is also a field ACL on a specific field that allows only the admin role, which one takes precedence?
In this case, will everyone be able to access the field because the table ACL is open to all users, or will only admin users be able to access the field due to the field ACL restriction?

[Tejas Adhalrao]

hi @Lisa71  ,

Table ACL: allows all users

Field ACL (for that field): allows only admin

Result: Only admin users will be able to access that field.
Other users can still see the record (because of the table ACL), but the restricted field will be blank or hidden for them.

meaning the field ACL overrides the table ACL for that field.

 If you found my solution helpful, please mark it as Helpful or Accepted Solution...!

thanks,

tejas

Email: adhalraotejas1018@gmail.com

LinkedIn: https://www.linkedin.com/in/tejas1018

[Ankur Bawiskar]

@Lisa71 

Output -> only admins can read/write that field as there is a field level READ/WRITE ACL

Others -> Can only see if Table.None READ IS Passed, Even if Table.None WRITE is passed, non-admin can't edit

see this for reference

Understanding Table-First Access Control Evaluation in ACLs 

Evaluating Row level and Field level ACLs 

Security setup: ACL evaluation order – Best Practice 

💡 If my response helped, please mark it as correct ✅ and close the thread 🔒— this helps future readers find the solution faster! 🙏

[Ankur Bawiskar]

@Lisa71 

Hope you are doing good.

Did my reply answer your question?

💡 If my response helped, please mark it as correct ✅ and close the thread 🔒— this helps future readers find the solution faster! 🙏

[Lisa71]

Thank you. If there's "tablename.*"  acl (*means all fields) allows everyone to access all the fields, plus the table ACL to allow everyone, and field acl to allow only admin to access field A, will the field A be accessible to everyone or only admin? Per my testing, everyone can access field A, so I'm confused now. 

[Tejas Adhalrao]

Hi @Lisa71  ,

In ServiceNow, the Field ACL restriction will take precedence. Even if the Table ACL allows everyone, a specific Field ACL acts as a second "lock." Only Admin users will be able to see or edit that field.

 If you found my solution helpful, please mark it as Helpful or Accepted Solution...!

thanks,

tejas

Email: adhalraotejas1018@gmail.com

LinkedIn: https://www.linkedin.com/in/tejas1018