From the course: ServiceNow: Basic Administration

Unlock this course with a free trial

Join today to access over 24,900 courses taught by industry experts.

Securing access with access control lists (ACLs)

Securing access with access control lists (ACLs) - ServiceNow Tutorial

From the course: ServiceNow: Basic Administration

Securing access with access control lists (ACLs)

- [Instructor] Imagine opening your dashboard and seeing 137 unauthorized updates this month. Most came from well-meaning users who should have never had edit rights in the first place. In the next five minutes, we'll fix that by mastering ServiceNow's Access Control Lists, or ACLs. Access controls, or ACLs, are the gatekeepers of your ServiceNow instance. They define who can perform actions, like viewing, editing, or deleting records. Best practice is to assign permissions to roles, then roles to groups, but never directly to users. This ensures scalability and consistency, as users can inherit permissions from their groups. ACLs can secure anything from a single field to an entire application. ACLs enforce security through three sequential checks. First, the system verifies the user has the required role. If they do, it evaluates any conditions, like only allow edits if the record is in draft state. Finally, it runs optional scripts for complex logic. If any check fails, access is…

Contents