Access Control

[RupeshK38781664]

When multiple ACL rules match the same table and operation — one grants access while another denies — what is the outcome?

[GlideFather]

Hi @RupeshK38781664,

the best and easiest way for you to find out is to go to your PDI and simulate such a situation and then to verify yourself. What's blocking you from doing so? ;)) or you can go to Access analyser and compare it from there after creating them..

Not sure about ACLs but I had the same question regarding assignment rules (same table, same conditions) and ServiceNow simply prioritised the firstly created record over the second one... 

You can set this for ACL, test a few scenarios and then you can write an article about it here! Own experience and genuine non-AI knowledge is what this Community always needs!

[Bhavya11]

Hi @RupeshK38781664 ,

You can check using debugging the for any user by session log, that will give you clear idea.

System Diagnostics > Script Debugger > Session Debug

Take any example from your PDI and check how many ACL it should pass through and which gives access, and which denies access.

Refer below link for more details,

https://www.servicenow.com/community/itsm-forum/acls-for-the-same-fields/td-p/773249/page/2

ACL order of evaluation for multiple rules on the same level for the same object

How are Multiple ACL Rules at the Same Point in the Processing Order evaluated?

Access Control in ServiceNow with 'Deny Unless' ACLs