Acl vs query business rule

[rambo1]

• What are pros and cons of acl and query business rule to filter out records based on roles?? What approach would be better to to restrict access to inactive records for users without itil or admin role? 

[Harsh Vardhan]

adding one thread here. kindly have a look. 

acl vs business rule

[Brad Tilton]

This list is old, but still accurate: https://community.servicenow.com/community?id=community_question&sys_id=11a68365db1cdbc01dcaf3231f96...

In addition to that, query business rules only apply for read access at the row level while ACLs can do CRUD at the row and column level.

There are also some implications when doing GlideRecord queries as query BRs will affect a GR query where ACLs will not unless you're using GlideRecord secure.

[Shrutika Surwad]

Hello,

You can follow following thread,

this might helps you.

https://community.servicenow.com/community?id=community_question&sys_id=f082c321dbd8dbc01dcaf3231f96...

Thanks,

Shrutika Surwade

[sailesh1]

Hey,

You may be benefitted from this link

https://community.servicenow.com/community?id=community_article&sys_id=8b8f72fd1babd810d2ccea89bd4bcb14

Please mark this answer as helpful and close the thread, so that it would be helpful for many others.

Sailesh L