Which is the best practice about ACL, creating new one or edit existing one?

[shun6]

Hi all,

I'm trying to create a custom role base ACL on existing tables such as 'incident'.

I want to know which is the best practice creating new one or edit existing one?

And are there any preferred  ACL rules based on role?

Thnaks,

[Sulabh Garg]

Hello Shun,

Best practice is always to disable the OOB one and create a copy of the OOB ACL and then edit the same.

There are no preferred ACL rules based on role as per  my knowledge, you can create new ACL's depending on the custom role as per your requirement.

Please Mark ✅ Correct/helpful, if applicable, Thanks!! 

Regards

Sulabh Garg

[shun6]

Thank you for your reply,

Are there any influence to other system when I disable OOB ACL rules and create custom new one?

Thanks

[Sulabh Garg · Accepted solution]

There is no impact as you already creating a copy of the same ACL, However when you edit the copied ACL then you should test it thoroughly on lower instances to see the impact.

Hope it helps!!

Please Mark ✅ Correct/helpful, if applicable, Thanks!! 

Regards

Sulabh Garg

[Sajilal]

Never update OOTB ones, always disable and create a new custom one. Always remember which OOTB ACL you are disabling as it could cause impacts to other tables.

I would enable ACL Debugger to see the impacts seperately.

For details: https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB0541355 

Please mark help/correct if you are ok!

Regards,
Saji