From the course: ServiceNow: Basic Administration
Unlock this course with a free trial
Join today to access over 24,900 courses taught by industry experts.
Securing access with access control lists (ACLs) - ServiceNow Tutorial
From the course: ServiceNow: Basic Administration
Securing access with access control lists (ACLs)
- [Instructor] Imagine opening your dashboard and seeing 137 unauthorized updates this month. Most came from well-meaning users who should have never had edit rights in the first place. In the next five minutes, we'll fix that by mastering ServiceNow's Access Control Lists, or ACLs. Access controls, or ACLs, are the gatekeepers of your ServiceNow instance. They define who can perform actions, like viewing, editing, or deleting records. Best practice is to assign permissions to roles, then roles to groups, but never directly to users. This ensures scalability and consistency, as users can inherit permissions from their groups. ACLs can secure anything from a single field to an entire application. ACLs enforce security through three sequential checks. First, the system verifies the user has the required role. If they do, it evaluates any conditions, like only allow edits if the record is in draft state. Finally, it runs optional scripts for complex logic. If any check fails, access is…
Practice while you learn with exercise files
Download the files the instructor uses to teach the course. Follow along and learn by watching, listening and practicing.