nerdexam
ServiceNow

CSA · Question #416

How would you define an Access Control, to allow a user with iti role to have permission to create incident records?

The correct answer is D. Name: incident None, Permission: create: Role: itil. To allow users with the 'itil' role to create incident records, an Access Control should be defined with the 'incident.None' name, a 'create' operation, and the 'itil' role.

Submitted by priya_blr· Apr 18, 2026Database Management and Platform Security

Question

How would you define an Access Control, to allow a user with iti role to have permission to create incident records?

Options

  • AName: incident"; Permission: write; Role: itil
  • BName: incident Any, Operation: write, Permission: itil
  • CName: incident.*; Operation: write; Permission: itil
  • DName: incident None, Permission: create: Role: itil
  • EName: incident. None; Operation: create; Role: itil

How the community answered

(35 responses)
  • B
    6% (2)
  • C
    3% (1)
  • D
    89% (31)
  • E
    3% (1)

Why each option

To allow users with the 'itil' role to create incident records, an Access Control should be defined with the 'incident.None' name, a 'create' operation, and the 'itil' role.

AName: incident"; Permission: write; Role: itil

The 'Permission' field is incorrect; Access Controls use 'Operation' for actions like create, read, write, or delete.

BName: incident Any, Operation: write, Permission: itil

"incident Any" is not the correct syntax for specifying a table-level Access Control, and 'Permission' is an incorrect field name.

CName: incident.*; Operation: write; Permission: itil

Using 'incident.*' with a 'write' operation would grant write access to all fields on existing incident records, not specifically the ability to create new records.

DName: incident None, Permission: create: Role: itilCorrect

To grant permission for creating new records on a specific table, the Access Control 'Name' must be 'table_name.None' (e.g., 'incident.None'), the 'Operation' must be 'create', and the 'Role' specified is 'itil', defining who can perform this action.

EName: incident. None; Operation: create; Role: itil

While 'incident.None' for the name and 'Operation: create' are correct, 'Permission: itil' is incorrect; the role should be specified under the 'Role' field, not 'Permission'.

Concept tested: Access Control (ACL) Definition

Source: https://docs.servicenow.com/bundle/utah-now-platform/page/administer/contextual-security/concept/c_ACLRules.html

Topics

#Access Control Lists (ACLs)#Roles#Security#Permissions

Community Discussion

No community discussion yet for this question.

Full CSA Practice