Alternative to access control or Different Security controls for records

[Satya24]

Dear Service Now Folks.

Greetings.

I was going through a ServiceNow article in Scripting book and observed the below statement which mentions other Server side security strategy apart from ACL's ,can some one guide me on other Security Strategy available for Data records Security in ServiceNow .

Appreciate the community folks for there help thank you.

[Sagar Pagar]

Hi Satya,

You could use the "Data Policy", or "Business rule" alternative for security strategy available for Data records Security in ServiceNow.

1) To display particular data records you could use the "Query business rule".

2) To prevent modification data records you can use "Data policy" you can able to restrict the modification in the data in list records, while using "UI policy" or "Client script" you can restrict in form level based on requirements.

Regards,

Sagar Pagar

[Akshata jamdar]

Hi Satya,

Another way to prevent user to access data in servicenow is to use query business rule. Query business rules are used to restrict the user access to some of the records in a table.

Query - for removing the annoying 'results hidden from ACL'

ACL:-when you restrict 10 records in a list. It will show "10 records are hidden by security".

where as using query business rule it will hide 10 records but does not show any message on list view.

Thanks and Regards,

Akshata

[asifnoor · Accepted solution]

Hi,

Data security in SN can be controlled at various levels

• ACL
• Roles and permissions
• Before Query Business Rules
• Data and UI policies

Mark the comment as a correct answer and helpful if it helps.

[chetanb]

You can also use Reference Qualifier(to restrict the data that is selectable for a reference field. Or used to create filters that restricts the data that is returned for a reference field)