nerdexam
ServiceNow

CAD · Question #176

An application called My App has a table, MyAppTable, with the following Application Access configuration: Accessible from: All application scopes Can read: Selected Can delete: Not selected Allow…

The correct answer is C. No Business Rule can be written which successfully deletes all records from the MyAppTable. Because the 'Can delete' option is explicitly not selected for MyAppTable's application access, no business rule, regardless of scope, will be able to delete records from it through application access.

Submitted by jaden.t· Apr 18, 2026Security and Restricting Access

Question

An application called My App has a table, MyAppTable, with the following Application Access configuration:

Accessible from: All application scopes Can read: Selected Can delete: Not selected Allow configuration: Selected Which of the following is true based on this configuration?

Options

  • AAny application developer can write a Business Rule which successfully deletes all records from
  • BAn application developer working in another privately scoped application can write a Business
  • CNo Business Rule can be written which successfully deletes all records from the MyAppTable
  • DAn application developer working in the My App scope can write a Business Rule for the

How the community answered

(51 responses)
  • A
    6% (3)
  • B
    2% (1)
  • C
    90% (46)
  • D
    2% (1)

Why each option

Because the 'Can delete' option is explicitly not selected for `MyAppTable`'s application access, no business rule, regardless of scope, will be able to delete records from it through application access.

AAny application developer can write a Business Rule which successfully deletes all records from

This is incorrect because 'Can delete: Not selected' prevents deletion from *any* application scope, not just other scopes.

BAn application developer working in another privately scoped application can write a Business

This is incorrect because 'Can delete: Not selected' specifically denies delete access from other privately scoped applications.

CNo Business Rule can be written which successfully deletes all records from the MyAppTableCorrect

The 'Can delete: Not selected' configuration explicitly prohibits deletions from `MyAppTable` from any other scope, and even from the same scope if the application's design dictates this restriction, ensuring data integrity for the application by overriding attempts to delete.

DAn application developer working in the My App scope can write a Business Rule for the

This is incorrect; even a Business Rule within the `My App` scope would be subject to the table's 'Can delete: Not selected' application access setting, which globally restricts deletion from that table via application access control.

Concept tested: Application scope table access control (delete)

Source: https://docs.servicenow.com/bundle/utah-servicenow-platform/page/develop/app-security/concept/application-access.html

Topics

#Application Access#Scoped Applications#Table Permissions#Cross-scope Access

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full CAD Practice