When evaluating Access Controls, ServiceNow searches and evaluates:

The correct answer is C. From the most specific match to the most generic match. ServiceNow evaluates Access Control Rules (ACLs) from the most specific match to the most generic match. The evaluation order goes: exact table + exact field → exact table + wildcard field → parent table + exact field → parent table + wildcard field → wildcard table + wildcard…

Submitted by haruto_sh· Apr 18, 2026Security and Restricting Access

Question

Options

AOnly for matches on the current table
BOnly for matches on the current field
CFrom the most specific match to the most generic match
DFrom the most generic match to the most specific match

How the community answered

(67 responses)

A
4% (3)
B
3% (2)
C
91% (61)
D
1% (1)

Explanation

ServiceNow evaluates Access Control Rules (ACLs) from the most specific match to the most generic match. The evaluation order goes: exact table + exact field → exact table + wildcard field → parent table + exact field → parent table + wildcard field → wildcard table + wildcard field (the catch-all). ServiceNow uses the first ACL that matches and grants or denies access based on that rule, which means more specific rules take precedence over generic ones.

Topics

#Access Controls#ACL Evaluation#Security Model

Community Discussion

No community discussion yet for this question.

Full CAD Practice