A new service catalog item is being developed, but should only be visible to managers inside the HR Department. What method would you use to fulfill this requirement?

Catalog content blocks are used for displaying information within a catalog, not for controlling the visibility of the catalog item itself based on user roles or groups.

User criteria on a catalog item primarily control *who can request* the item or its visibility within a catalog, but ACLs provide more granular, record-level control over who can *see* the item record itself.

ACLs (Access Control Lists) are the fundamental security mechanism in ServiceNow that control access to records and fields. By creating an ACL on the specific catalog item record and applying a condition that targets the 'Department Manager group' and potentially specifies the HR Department, you can precisely dictate who is allowed to view the item.

Publishing an item only in the HR service catalog makes it available to anyone with access to that catalog, not specifically to managers within HR.

An ACL on the HR service catalog would control access to the entire catalog, not selectively restrict visibility of a single item within it to a subset of users.