Implementing ACLs to manage access for different law firms within a single ServiceNow instance
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
02-22-2025 03:08 PM
Hello,
We are working on a law firm where one business unit does see the other, such as Incident, Problem, reports etc...
We proposed ACL, how can ACL be designed to regulate business units -specific or Persona-Specific views on both Platform and the Service Portal.
What would be the approach & best practices to have a structured Access Control List and standardized naming convention for Role Groups & Support Groups to aid operations & maintenance.
Please share experience and a docs link to help understand more.
Please help with docs link, preferably the most appropriate to match the scenario.
Regards

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
02-22-2025 06:36 PM - edited 02-22-2025 06:37 PM
@Mansor2 Instead of handling this via ACL, you should consider domain separation plugin provided by ServiceNow. Using domain separation you can prevent data of one business unit seeing data of other easily. For more information please refer to https://developer.servicenow.com/dev.do?_escaped_fragment_=/learn/learning-plans/xanadu/servicenow_a....
https://www.servicenow.com/community/now-platform-forum/domain-separation/td-p/3185701
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
02-22-2025 09:12 PM
Thanks for the advice. We feel that domain separation may be overkill for this scenario, as managing multiple domains adds administrative overhead. Furthermore, we are looking at granular access control within the environment.
Regards
Mansor
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
02-23-2025 03:46 AM
Designing ACLs for a law firm’s ServiceNow setup requires a clear structure. A good approach is to define roles based on business units and personas, ensuring each has tailored access to incidents, reports, etc. Consistent naming conventions for Role Groups and Support Groups simplify maintenance. For additional insights, reviewing KY arrest documentation could provide helpful strategies for organizing and securing access controls. Would love to hear how you structure yours!
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-03-2025 01:25 AM
If you're looking to streamline your work-from-home experience, consider exploring the virtual office tools available to enhance productivity and collaboration. These tools offer seamless access to essential resources, making it easier to manage tasks and stay connected with your team. Whether you're a freelancer or part of a larger organization, optimizing your digital workspace can lead to more efficient and effective remote work.