---
sourceDocument: Zurich Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/zurich/platform-security

 Release :

    - zurich

ft:locale :

    - en-US

ft:publication_title :

    - Zurich Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Use Evaluate access

# Use Evaluate access {#ariaid-title1}

Release version: Zurich  
Updated July 31, 2025  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 minutes to read  
Analyze identities on the ServiceNow® instance.

## Before you begin

Role required: admin, access_analyzer_admin

The following procedure describes the steps for accessing Evaluate access in the Access Analyzer and using its various features.  
Note:  
Access Analyzer is a ServiceNow Store app.

## Procedure

1. Navigate to AllAccess AnalyzerAnalyze Permissions.  
   The Analyze access and permissions home page is displayed.
2. Select the Evaluate access tab.
3. Select your criteria as follows.  
   {#using-evaluate-access__table_cpw_mgd_qxb__entry__2}

   | Field | Description |
   |-|-|
   | Analyze by | Access analysis for a user, a role, or a group |
   | Select user | User name from the list. |
   | Rule type | Access analysis for a table, a UI page, a REST Endpoint, or a client callable script include. |
   | Select table | Table name from the list. |
   | Select record | Record name from the list. |
   | Select field | Field name from the list. |
   [Table 1. Select your criteria for analyzing access and permissions]

   {#using-evaluate-access__table_cpw_mgd_qxb}
4. Specify the description in the Description field.
5. Select Analyze permissions.  
   The access results for the user are displayed. Similarly, you can analyze the permissions of a group or role for the following rule types:
   * Table (record)
   * Client callable scripts include
   * REST endpoints

   {#using-evaluate-access__ul_vly_ljd_cyb}

   The access results are displayed.

   The Access results table includes the following fields.
   {#using-evaluate-access__table_dqg_wxp_dyb__entry__2}

   | Field | Description |
   |-|-|
   | Operation | The type of operation that the user, group, or role can perform for the selected table, record, or field. |
   | Overall Access | Result of the overall access. The results are as follows: * \[Passed\] Access granted * \[Blocked\] Access denied * \[Skipped\] Didn't evaluate * \[Undefined\] No rule found {#using-evaluate-access__ul_uz3_3yp_dyb} |
   | ACL | Whether an ACL is defined for the selected operation. |
   | Access Handler | An internal system check using hidden source code on the platform. IAccessHandler can grant or deny access to a resource without evaluating ACLs. If IAccessHandler is ignored, then the ACLs are evaluated. |
   | Data filtration | A data filter is a form of access control that works along with the existing Access Control rules (ACLs) on your instance. |
   | Execution time | The time at which the access results were executed. |
   | Insights | More information about the selected operation. |
   | Execution ID | A unique ID for each access result execution. |
   [Table 2. Access results]

   {#using-evaluate-access__table_dqg_wxp_dyb}
6. Select the Operation for more information about the ACL.  
   For example, if you select read, the access control related to read is displayed.{#using-evaluate-access__table_j2x_zbs_xbc__entry__2}

   | Field | Description |
   |-|-|
   | Name | Name of the ACL. |
   | Decision Type | Decision type configured for the ACL. Allow access or Deny access. |
   | Applies to condition | Whether the ACL is applied to a condition. |
   | ACL Applies to | Details about the resource the ACL is applied. |
   | Status | Status of the ACL or Access result. |
   | Required ACL Roles | Details of the role that is required to access the resource. |
   | Role | Status of the role. Passed, Skipped, or Blocked. |
   [Table 3. ACL Details]

   {#using-evaluate-access__table_j2x_zbs_xbc}
{#using-evaluate-access__steps_mkv_2nt_jzb}

*[\>]: and then