ACL condition

[Sunny Gurung]

Which of the following will allow access if true in an ACL?

Condition field evaluates to true

Script field returns true or sets the variable answer to true

The user has one of the Required roles

Other matching ACL rules for the object evaluate to true

[Sagar Pagar]

Hi Sunny,

Access Control Rules allow access to the specified resource if all three of these checks evaluate to true:

1. The user has one of the roles specified in the Role list, or the list is empty.
2. Conditions in the Condition field evaluate to true, or conditions are empty.
3. The script in the Script field (advanced) evaluates to true, or sets the variable "answer" to true, or is empty.

for more information refer following link-

https://docs.servicenow.com/bundle/jakarta-servicenow-platform/page/administer/contextual-security/concept/access-control-rules.html?title=Using_Access_Control_Rules#d825587e730

Please mark as Correct Answer/Helpful, if applicable.

Regards,

Sagar Pagar

[Sunny Gurung]

Sagar,

I am confused about the option d. do you think it is just a,b,and c?

Thanks

[Sagar Pagar]

Yes. Matching ACL Rules Required to Access Object.

you will get clear idea just check this link once-

https://docs.servicenow.com/bundle/jakarta-servicenow-platform/page/administer/contextual-security/concept/access-control-rules.html?title=Using_Access_Control_Rules#d825587e730

Regards,

Sagar

[Kajal Goti · Accepted solution]

Hi,

All must be evalute true.role,condition and script.

• The condition must evaluate to true.
• The script must evaluate to true or return an answer variable with the value of true.
• The user must have one of the roles in the required roles list. If the list is empty, this condition evaluates to true.
• [Record ACL rules only] The matching table-level and field-level ACL rules must both evaluate to true.

Please Mark as Correct/Helpful if you find help.