What is the difference between Table ACLs and Field ACLs?

[kishorchika]

What is the difference between Table ACLs and Field ACLs?

[Dr Atul G- LNG · Accepted solution]

Hi @kishorchika 

Table ACLs (Access Control Lists)

• What it controls: Access to entire records in a table.

• Use case: Determines whether a user can read, write, create, or delete records in a given table.

• Example: A Table ACL on the Incident table controls whether a user can access any incident records at all.

---

🔐 Field ACLs

• What it controls: Access to individual fields within a record.

• Use case: Even if a user has access to a record (via Table ACL), Field ACLs determine whether they can see or modify specific fields in that record.

• Example: A Field ACL on the Incident.priority field can restrict users from editing the priority, even if they can view the rest of the incident.

---

⚙️ How They Work Together

1. Field ACLs are more specific than Table ACLs.

2. If both exist, both must grant access. If either denies, access is denied.

3. ServiceNow checks access in this order:

   • Specific Field ACL

   • Table-level Field ACL (e.g., incident.*)

   • Table ACL

---

✅ Quick Summary

Type	Scope	Controls Access To	Example
Table ACL	Whole table	Record-level access (CRUD)	Can the user view Incident records?
Field ACL	Specific fields	Field-level access (Read/Write)	Can the user change priority field?

[pranita-24]

Hi,

Table ACLs control access at the record level — they decide if a user can create, read, write, or delete a record in a table.

Field ACLs go deeper, controlling access to individual fields inside a record. For example, a user may be able to view an incident (Table ACL) but not see the “Caller” field (Field ACL).