How is granular read and write access for a specific change model defined?

Enabling Advanced Security on a Change Model activates user criteria fields that allow administrators to specify exactly which users or groups can read or write that model, providing granular access beyond standard table-level ACLs. This configuration is done directly on the change model record, not at the table level.

ACLs on the Create New landing page control access to initiating change records generally, not granular read/write access tied to a specific change model.

Change properties store configuration metadata of a change model such as workflow and approval settings, but do not define user-specific security access.

ACLs on the chge_model table apply broadly to all change model records, not to an individual model with user-criteria-based granularity.