CSA · Question #416
How would you define an Access Control, to allow a user with iti role to have permission to create incident records?
The correct answer is D. Name: incident None, Permission: create: Role: itil. To allow users with the 'itil' role to create incident records, an Access Control should be defined with the 'incident.None' name, a 'create' operation, and the 'itil' role.
Question
How would you define an Access Control, to allow a user with iti role to have permission to create incident records?
Options
- AName: incident"; Permission: write; Role: itil
- BName: incident Any, Operation: write, Permission: itil
- CName: incident.*; Operation: write; Permission: itil
- DName: incident None, Permission: create: Role: itil
- EName: incident. None; Operation: create; Role: itil
How the community answered
(35 responses)- B6% (2)
- C3% (1)
- D89% (31)
- E3% (1)
Why each option
To allow users with the 'itil' role to create incident records, an Access Control should be defined with the 'incident.None' name, a 'create' operation, and the 'itil' role.
The 'Permission' field is incorrect; Access Controls use 'Operation' for actions like create, read, write, or delete.
"incident Any" is not the correct syntax for specifying a table-level Access Control, and 'Permission' is an incorrect field name.
Using 'incident.*' with a 'write' operation would grant write access to all fields on existing incident records, not specifically the ability to create new records.
To grant permission for creating new records on a specific table, the Access Control 'Name' must be 'table_name.None' (e.g., 'incident.None'), the 'Operation' must be 'create', and the 'Role' specified is 'itil', defining who can perform this action.
While 'incident.None' for the name and 'Operation: create' are correct, 'Permission: itil' is incorrect; the role should be specified under the 'Role' field, not 'Permission'.
Concept tested: Access Control (ACL) Definition
Source: https://docs.servicenow.com/bundle/utah-now-platform/page/administer/contextual-security/concept/c_ACLRules.html
Topics
Community Discussion
No community discussion yet for this question.