nerdexam
ServiceNow

CSA · Question #401

Access controls are evaluated in this order: 1. Match object against table ACL 2. Match the object against field ACL Within step 1 above, what order are the table ACLs evaluated?

The correct answer is E. Specific general: Table ACL, Parent Table ACL, Wildcard (*) ACL. ServiceNow Access Control Lists (ACLs) for tables are evaluated from the most specific to the most general rule to determine access permissions.

Submitted by chiamaka_o· Apr 18, 2026Database Management and Platform Security

Question

Access controls are evaluated in this order: 1. Match object against table ACL 2. Match the object against field ACL Within step 1 above, what order are the table ACLs evaluated?

Options

  • ASpecific to general: Table.Field ACL, Parent Table.Field ACL, *.Field ACL
  • BBottom to top: Table ACL. Table.Field ACL, Parent Table. Field ACL
  • CGeneral to specific: Table ACL, Table.Field ACL, Parent Table, Field ACL
  • DTop to bottom: Wildcard Table ACL, Parent Table ACL, Table ACL
  • ESpecific general: Table ACL, Parent Table ACL, Wildcard (*) ACL

How the community answered

(35 responses)
  • A
    6% (2)
  • C
    3% (1)
  • D
    3% (1)
  • E
    89% (31)

Why each option

ServiceNow Access Control Lists (ACLs) for tables are evaluated from the most specific to the most general rule to determine access permissions.

ASpecific to general: Table.Field ACL, Parent Table.Field ACL, *.Field ACL

This option describes field ACLs and an incorrect evaluation order for matching table ACLs.

BBottom to top: Table ACL. Table.Field ACL, Parent Table. Field ACL

This option uses incorrect terminology and mixes table and field ACL concepts.

CGeneral to specific: Table ACL, Table.Field ACL, Parent Table, Field ACL

This option incorrectly mixes table and field ACLs and misstates the evaluation order as 'general to specific' for matching within table ACLs.

DTop to bottom: Wildcard Table ACL, Parent Table ACL, Table ACL

While 'general to specific' implies the direction, the terminology 'Top to bottom' is not standard, and the order of rules listed ('Wildcard Table ACL, Parent Table ACL, Table ACL') is reversed from the correct specific-to-general precedence.

ESpecific general: Table ACL, Parent Table ACL, Wildcard (*) ACLCorrect

Within the evaluation of table ACLs, the system first checks for ACLs defined specifically for the current Table, then progresses to ACLs for any Parent Tables, and finally evaluates the most general Wildcard (*) ACL, applying the most specific matching rule that grants access.

Concept tested: ServiceNow ACL evaluation order for tables

Source: https://docs.servicenow.com/bundle/utah-platform-security/page/administer/contextual-security/concept/acl-rule-types.html

Topics

#ACL Evaluation Order#Platform Security#Access Control

Community Discussion

No community discussion yet for this question.

Full CSA Practice