Interview question

[MS17]

Hi All,

Can anyone please answer for the below questions?

1. Can we trigger user and group approval at the same time using workflow?

2. When to use before and after BR with example

3. why ACLs are having highest priority than client script/ ui policy, what are the major advantages of acl? why we need to use acl even if the client script/ ui policy will provide the same results?

[Sandeep Rajput]

@MS17 Please see the inline answers to your questions.

1. Can we trigger user and group approval at the same time using workflow?

Answer: Parallel approvals can be triggered within workflow.

2. When to use before and after BR with example

Answer: Before business rule can be used when you would like to set some default values on some fields of the table on which the before business rule is triggering. 

After: After business rule can be used to update/create data in the auxiliary tables when the data in main table is already saved.

3. why ACLs are having highest priority than client script/ ui policy, what are the major advantages of acl? why we need to use acl even if the client script/ ui policy will provide the same results?

Answer: Access control list (ACL) is used to validate if a user has access to a table, record and fields on the table. Since access needs to be validated first, hence ACLs are validated first and than client script and UI policies are validated. ACLs are more performance efficient than client script and UI policies and they also work on the list and client scirpt and UI policy mostly work at the form level.

Please mark the response helpful and accepted solution if it manages to address your question.

[Harish Bainsla]

Hi @MS17 please check answers of your question 

1. Yes, you can trigger user and group approvals simultaneously using a workflow in ServiceNow. You can configure parallel approval activities in your workflow to achieve this.

2.

Before Business Rule in ServiceNow:
Code written in before business rule get executed when user submits the form and data is not saved in database.
Let’s say User click on submit button --> Before business rule code executes --> information will save in database.

For e.g. Let’s say you have written the code that when user click on submit button then some extra information which in not filled by user such as user current location, user manager name and user past activities will get save when user click on submit button.

After Business Rule in ServiceNow:
Code written in after business rule get executed when user submits the form and data saved in database.
Let’s say User click on submit button --> data saved in database --> Now after business rule code get executed.

For e.g. there is parent incident and child incident and you want that related child incident will get closed automatically after the parent incident get closed by user.

3.

ACLs evaluated server side and most secure way of restricting access to fields. UI Policy execute on form and on client side (Browser). 

For better understand watch videos 

https://www.youtube.com/watch?v=VTJz7Rc2uHo&list=PLzTvAeLiW8AeeRNe4L0zqan_VT2P6QISo

[Sanjana8]

1.  Can we trigger user and group approval at the same time using workflow? --> Yes, you can trigger both simultaneously. Also The Approval - User activity will create one or more approval requests for
   individual users. You can add both users and groups as approvers in this activity,
   but when adding a group, this activity will actually generate a separate approval
   request for each user in that group

2. When to use before and after BR with example --> "Before" business rules are executed before a database operation, allowing you to modify data before record is saved. "After" business rules run after the database operation has completed and the record is saved or updated. 

Example for before BR : Populate assignment group before creation of incident record

Example for After BR  : When the Priority of Incident is updated to P1 then it should be reflected in short description field.

why ACLs are having highest priority than client script/ ui policy, what are the major advantages of acl? why we need to use acl even if the client script/ ui policy will provide the same results? 

--> An access control is a security rule defined to restrict the permissions of a user from viewing and interacting with data. Most security settings are implemented using access controls.
All access control list rules specify:
1. The object and operation being secured
2. The permissions required to access the object

And hence to provide more security to your data, ACL are given highest priority.

Please mark Helpful if it satisfies your Question

Thanks

Sanjana