ACL Related

[VaidehiL]

In service now there are two ACL's one is giving access and other is rejecting access but rejecting one has script condition so whose priority is greater . Does script ACL has higher priority?

[annb19]

Hi @VaidehiL ,

If you have multiple "Allow if" ACLs targeting the same object and operation, they are evaluated using OR logic. If any one of the ACLs grants access, the user is allowed access.
For "Deny unless" ACLs, ServiceNow uses AND logic. The user must satisfy all applicable Deny Unless ACLs. If even one Deny Unless ACL evaluates to false, access is denied.
Also, Deny Unless ACLs are evaluated before Allow If ACLs. Therefore, if you have one Allow If ACL and one Deny Unless ACL for the same object and operation, the Deny Unless ACL is checked first. 
Hope this helps!