Question on ACL

[Community Alums]

Hi,

I have created a new table and just added only one read ACL with no roles, conditions, or anything else. I removed Admin Overrides, but the admin can still see the records. Why? Kindly help.

Regards

Suman P.

[Mark Manders]

Because you have a read ACL that allows all users to read the table. That includes the Admin.

What are you trying to achieve, because what you are asking is exactly because of how you configured it.

[Anand Kumar P]

Hi @Community Alums ,

Unchecking the Admin Overrides checkbox in an ACL does not block administrators from accessing the resource because admins inherently bypass role checks. To restrict admin access, you must use the nobody role or create conditions or scripts that explicitly deny access to admins.

https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB0685046

If my response helped, please mark it as the accepted solution ✅ and give a thumbs up👍.
Thanks,
Anand

[Community Alums]

Hi @Anand Kumar P,

What is the use of the checkbox then? In which scenario does it help?

Regards

Suman P.

[Mark Manders]

It helps that if you allow access to ITIL on incident records, your admin also has the access without adding the admin role explicitly to the ACL. It adds the admin. So if you want ITIL to be able to read all incidents, but not the admin, you uncheck the checkbox.