nerdexam
ServiceNow

CSA · Question #173

How would you define an Access Control, to allow a user with itil role to have permission to create incident records?

The correct answer is A. Name: incident.None; Operation: create; Role: itil. To allow itil users to create incident records, an Access Control should be defined with the Name: incident.None, Operation: create, and Role: itil.

Submitted by fernanda_arg· Apr 18, 2026Database Management and Platform Security

Question

How would you define an Access Control, to allow a user with itil role to have permission to create incident records?

Options

  • AName: incident.None; Operation: create; Role: itil
  • BName: incident.Any; Operation: write; Permission: itil
  • CName: incident:*; Permission: write; Role: itil
  • DName: incident.None; Permission: create; Role: itil
  • EName: incident:*;Operation: write; Permission: itil

How the community answered

(25 responses)
  • A
    96% (24)
  • C
    4% (1)

Why each option

To allow `itil` users to create incident records, an Access Control should be defined with the `Name: incident.None`, `Operation: create`, and `Role: itil`.

AName: incident.None; Operation: create; Role: itilCorrect

For table-level `create` operations, the Access Control object name typically uses `tablename.None` (e.g., `incident.None`) to signify that the ACL applies to the table itself when creating a new record, with `Operation: create` and the required `Role: itil`.

BName: incident.Any; Operation: write; Permission: itil

`incident.Any` or `incident:*` are not standard naming conventions for table-level `create` ACLs, and `Operation: write` is for modifying existing records, not creating new ones.

CName: incident:*; Permission: write; Role: itil

`incident:*` is used for field-level ACLs or sometimes for a collection of fields, and `Operation: write` is for updating existing records, not creating.

DName: incident.None; Permission: create; Role: itil

"Permission" is not the correct field name for an Access Control; it should be "Operation."

EName: incident:*;Operation: write; Permission: itil

`incident:*` is not the correct naming for a table-level `create` operation, and "Permission" is not the correct field name.

Concept tested: Access Control List (ACL) for table-level create

Source: https://docs.servicenow.com/bundle/utah-platform-security/page/administer/contextual-security/concept/acl-rules-access.html

Topics

#Access Control Lists (ACLs)#Roles#Security#Table-level Access

Community Discussion

No community discussion yet for this question.

Full CSA Practice