CSA · Question #88
What is specified in an Access Control rule?
The correct answer is C. Object and Operation being secured; Permissions required to access the object. An Access Control rule (ACL) explicitly defines the specific object and operation to be secured, along with the permissions (roles, conditions, or scripts) required for a user to access it.
Question
What is specified in an Access Control rule?
Options
- AGroups, Conditional Expressions and Workflows
- BTable Schema, CRUD, and User Authentication
- CObject and Operation being secured; Permissions required to access the object
- Dsecurity_admin
How the community answered
(42 responses)- A2% (1)
- C95% (40)
- D2% (1)
Why each option
An Access Control rule (ACL) explicitly defines the specific object and operation to be secured, along with the permissions (roles, conditions, or scripts) required for a user to access it.
While groups and conditional expressions can be part of the permissions, workflows are not specified within an ACL itself.
Table Schema relates to the structure of tables, and User Authentication is about verifying user identity; neither are directly specified within an ACL.
An Access Control rule (ACL) precisely specifies what (the object, e.g., a table, field) is being secured and what action (the operation, e.g., create, read, write, delete) is being controlled. It then defines the required permissions, which can include specific roles, conditions, or scripts that must evaluate to true for access to be granted.
`security_admin` is a role that grants elevated privileges but is not a component specified within an ACL rule definition itself.
Concept tested: ServiceNow Access Control Rule (ACL) components
Source: https://docs.servicenow.com/bundle/utah-platform-administration/page/administer/contextual-security/concept/c_AccessControlRules.html
Topics
Community Discussion
No community discussion yet for this question.