What is the use of this property 'glide.ais.security.admin_scope_field_acl_exclude_tables' ?

[Harshit Sharma1]

Can someone explain the glide.ais.security.admin_scope_field_acl_exclude_tables property? Why do we use it? It says that it used to mention list of tables(comma separated) that will not honor scope admin field acls per-scope. What exactly does "admin field acls per-scope" mean?

[Maddysunil · Accepted solution]

@Harshit Sharma1 

"admin field ACLs per-scope" refers to Access Control Lists (ACLs) that are set on fields to control who can access or modify them, based on the user's role or scope.

By default, when you set up ACLs on fields, they apply universally across all scopes within your ServiceNow instance. However, there might be cases where you want to exclude certain tables from adhering to these field ACLs on a per-scope basis.

The property glide.ais.security.admin_scope_field_acl_exclude_tables allows you to specify a list of tables (comma-separated) for which the field ACLs should not be enforced on a per-scope basis. This means that even if you have defined field ACLs for certain roles or scopes, those ACLs will not apply to the fields on the specified tables.

This can be useful in scenarios where you have specific tables or fields that you want to exempt from the usual field ACL enforcement, perhaps due to special requirements or workflows in your organization.

For example, let's say you have a table called "SensitiveData" that contains highly confidential information. You might want to exclude this table from adhering to the usual field ACLs so that only certain roles or users with specific permissions can access or modify the data, regardless of their scope.

In summary, glide.ais.security.admin_scope_field_acl_exclude_tables provides a way to customize ACL enforcement for specific tables, allowing administrators to tailor access control to meet their organization's needs.

Please Mark ✅Correct if this solves your query and also mark 👍Helpful if you find my response worthy based on the impact.

Thanks

[Harshit Sharma1]

Very well explained @Maddysunil . Thanks!

So these admin field acls are present in sys_security_acl table right?

[Maddysunil]

@Harshit Sharma1 

Yes, that's correct. The Admin Field ACLs, which control access to fields based on a user's role or scope, are managed through records in the "sys_security_acl" table.

[Sid_Takali]

HI @Harshit Sharma1 https://sn.jace.pro/property/glide-ais-security-admin-scope-field-acl-exclude-tables/ 

Regards,

Siddharam