CSA · Question #173
How would you define an Access Control, to allow a user with itil role to have permission to create incident records?
The correct answer is A. Name: incident.None; Operation: create; Role: itil. To allow itil users to create incident records, an Access Control should be defined with the Name: incident.None, Operation: create, and Role: itil.
Question
How would you define an Access Control, to allow a user with itil role to have permission to create incident records?
Options
- AName: incident.None; Operation: create; Role: itil
- BName: incident.Any; Operation: write; Permission: itil
- CName: incident:*; Permission: write; Role: itil
- DName: incident.None; Permission: create; Role: itil
- EName: incident:*;Operation: write; Permission: itil
How the community answered
(25 responses)- A96% (24)
- C4% (1)
Why each option
To allow `itil` users to create incident records, an Access Control should be defined with the `Name: incident.None`, `Operation: create`, and `Role: itil`.
For table-level `create` operations, the Access Control object name typically uses `tablename.None` (e.g., `incident.None`) to signify that the ACL applies to the table itself when creating a new record, with `Operation: create` and the required `Role: itil`.
`incident.Any` or `incident:*` are not standard naming conventions for table-level `create` ACLs, and `Operation: write` is for modifying existing records, not creating new ones.
`incident:*` is used for field-level ACLs or sometimes for a collection of fields, and `Operation: write` is for updating existing records, not creating.
"Permission" is not the correct field name for an Access Control; it should be "Operation."
`incident:*` is not the correct naming for a table-level `create` operation, and "Permission" is not the correct field name.
Concept tested: Access Control List (ACL) for table-level create
Source: https://docs.servicenow.com/bundle/utah-platform-security/page/administer/contextual-security/concept/acl-rules-access.html
Topics
Community Discussion
No community discussion yet for this question.