nerdexam
ServiceNow

CSA · Question #189

In what order are Access Controls evaluated?

The correct answer is D. Table-level - most specific to most general, then Row-level - most specific to most general. The question asks for the hierarchical order in which ServiceNow Access Control List (ACL) rules are evaluated.

Submitted by rania.sa· Apr 18, 2026Database Management and Platform Security

Question

In what order are Access Controls evaluated?

Options

  • AField-level - most specific to most general; then Table-level - most specific to most general
  • BField-level - most general to most specific; then Row-level - most specific to most general
  • CTable-level - most specific to most general; then Field-level - most specific to most general
  • DTable-level - most specific to most general, then Row-level - most specific to most general

How the community answered

(23 responses)
  • A
    4% (1)
  • B
    4% (1)
  • D
    91% (21)

Why each option

The question asks for the hierarchical order in which ServiceNow Access Control List (ACL) rules are evaluated.

AField-level - most specific to most general; then Table-level - most specific to most general

Field-level access is typically evaluated after table and row access, not first.

BField-level - most general to most specific; then Row-level - most specific to most general

Field-level is not evaluated first, and the evaluation order within a level is generally most specific to most general, not vice versa for the first part.

CTable-level - most specific to most general; then Field-level - most specific to most general

While Table-level specific to general is correct for the first stage, the next stage of evaluation after table access is typically at the Row-level, not Field-level directly for record access.

DTable-level - most specific to most general, then Row-level - most specific to most generalCorrect

Access Controls are evaluated first at the Table-level, proceeding from the most specific rule conditions to the most general. Once table access is granted, evaluation moves to the Row-level, also applying rules from most specific conditions to most general, to determine access to individual records.

Concept tested: ServiceNow Access Control (ACL) evaluation order

Source: https://docs.servicenow.com/bundle/utah-platform-administration/page/administer/contextual-security/concept/c_AccessControlRules.html

Topics

#Access Control#ACL Evaluation#Platform Security#Table Access

Community Discussion

No community discussion yet for this question.

Full CSA Practice