Modify OOB ACLs

[shonamac]

Hi Folks,

Apologies for this stupid question (yes I know the only stupid question is the one you don't ask!!)

We've always been advised never to modify anything oob as it affects upgrades.   I assume the same goes for ACLs - is it best practice to copy the ACL you wish to modify and modify it, then deactivate the original.   The only thing is if you deactivate the rule it shows you as the last person to modify it so surely the system would see you as the owner and not upgrade.

Thanks in advance for confirming best practice

Shona

[HarshTimes]

Hi Shona

Yes , you are correct.When you will upgrade this particular ACL will not be updated and remain inactive. After upgrade you can find this particular record in upgrade history as skipped.If you are deactivating that ACL it means you are changing something on that ACL. I think its better to update that only instead of creating a new one again.

It also depends on the requirement and scenario to decide what to do in such cases.

Regards,

Harsh

[Harish KM]

Hi Shona,

Always there will be a scenario where you have to modify OOB ACL. Don worry abt that as Servicenow upgrades will skip those and later on if you want you can still revert back to the original..

[amlanpal · Accepted solution]

Hi Shona,

Well, there is a column present (you can avail that via List layout or 'gear' icon) named 'Replace on upgrade'. This columns defines whether that particular record in your ACL table will get affected during upgrade or not. If the value is 'false' it will not get overwritten during upgrade. You may find the below link as helpful:

Replace on upgrade

I hope this helps.Please mark correct/helpful based on impact

[shonamac]

Thanks Everyone for your input and advice - much appreciated