Debug ACL in Serivcenow

[pansarepooj]

How to Debug ACL in Serivcenow step by step?

[J Siva]

Hi @pansarepooj 
One of the best ways to debug the ACL is using "Access Analyzer"
For more details, please chcek out the below product doc and youtube video.
Access Analyzer

Introduction to ServiceNow Access Analyzer

Regards,
Siva

[Ankur Bawiskar]

@pansarepooj 

so what did you start with? where are you stuck?

You can easily use Access analyzer to check this

links shared by @J Siva should help you

If my response helped please mark it correct and close the thread so that it benefits future readers.

[sunil maddheshi]

@pansarepooj 

ACLs in ServiceNow control access at:

• Table Level: Whole-table access (read, write, create, delete)

• Field Level: Access to individual fields (read, write)

Each ACL checks:

• Role

• Condition

• Script

All of them must return true for the access to be granted.

 

Step 2: Enable ACL Debugging

1. Go to the Application Navigator.

2. Search for and open "System Security → Debug Security Rules".

3. Click "Debug Security Rules" to enable ACL debug output.

4. Open a new tab and perform the action you're trying to debug (view, update, etc.).

5. Review the debug messages in the Session Debug Log.

This shows which ACLs passed or failed, and why.

---

Step 3: Review the ACL Logs

Look for messages like:

Access Check on table: incident (read) ACL: incident.* (read) - Passed (true) ACL: incident.short_description (read) - Failed (false)

This tells you:

• What was checked (table/field)

• Which ACL was evaluated

• Whether it passed or failed
  
  Please mark correct/helpful if this helps you!