CAD

MAGAPUV
Tera Contributor

Which of the following statements must evaluate to true for a user to pass an Access Control? (Choose three.)

  • A. The user has one of the roles specified in the Required roles related list.
  • B. Scripts configured in the Access Control must evaluate to true.
  • C. Other matching Access Controls for the records evaluate to true.
  • D. Conditions configured in the Access Control must evaluate to true.
  • E. The user must be granted access through a business rule.

Explain why too 

7 REPLIES 7

harish41
Tera Guru

Hi @MAGAPUV 

  • A. The user has one of the roles specified in the Required roles related list.
  • B. Scripts configured in the Access Control must evaluate to true.
  • D. Conditions configured in the Access Control must evaluate to true.

 

Mark as correct and helpful if it solved your query.

Regards,
Harish




PrashantLearnIT
Giga Sage

Hi @MAGAPUV 

 

  • A. The user has one of the roles specified in the Required roles related list.
  • B. Scripts configured in the Access Control must evaluate to true.
  • D. Conditions configured in the Access Control must evaluate to true.
********************************************************************************************************
Please appreciate the efforts of community contributors by marking the appropriate response as the correct answer and helpful. This may help other community users to follow the correct solution in the future.

********************************************************************************************************
Cheers,
Prashant Kumar
ServiceNow Technical Architect


Community Profile LinkedIn YouTube Medium TopMate
********************************************************************************************************

Pradeep Thipani
Mega Sage

Hi @MAGAPUV ,

 

The correct answers are:

 

A. The user has one of the roles specified in the Required roles related list. - The user must have at least one of those roles if it is specified in Required roles list to access the data or tables.

 

B. Scripts configured in the Access Control must evaluate to true. - ACLs can have more complex scripts to check the access, So it has to be evaluate to true.

 

D. Conditions configured in the Access Control must evaluate to true. - Based on condition provided on ACL the access has to be granted, so conditions must evaluate to true as they are core of ACLs.

 

Why not C and E:

 

C. Other matching Access Controls for the records evaluate to true. - ACLs are evaluated independently. logged in user should satisfy any one ACL of record to gain access not all of them.

 

E. The user must be granted access through a business rule - BRs runs when record inserted, updated, displayed and queried.  While ACLs works on security mechanism to control read, write, create and delete operations.

 

Thanks,

Pradeep

 

 

 

"If this response was useful, please select 'Accept as Solution' and mark it as 'Helpful.' This helps me provide better answers and assists the community ".

Regards,
Pradeep

Sandeep Rajput
Tera Patron
Tera Patron

@MAGAPUV 

A. The user has one of the roles specified in the Required roles related list.

B. Scripts configured in the Access Control must evaluate to true.

D. Conditions configured in the Access Control must evaluate to true.