InServiceNow,Access Control Rules (ACLs)determine whether auser can access a specific record, table, or field.

When evaluatingtable ACLs, ServiceNow follows aspecific-to-generalapproach:

First, it checks the most specific ACL (Table ACL)

Example: If the table isincident, ServiceNow first checks ACLs forincident.

Then, it checks the Parent Table ACL(if the table is inherited)

Example: Sinceincidentextendstask, it will check ACLs fortask.

Finally, it checks the Wildcard ACL (*ACL)

If no specific or parent table ACL is matched, ServiceNow checks for awildcard ACL(*.read,*.write, etc.).

Specific Table ACL(e.g.,incident.read)

Parent Table ACL(e.g.,task.read)

Wildcard ACL(e.g.,*.read)

Order of ACL Evaluation:Thisensures granular access control, giving priority tomore specific rules before applying broader permissions.

*A. Specific to general: Table.Field ACL, Parent Table.Field ACL, .Field ACLIncorrect– Field ACLs are evaluatedaftertable ACLs. This option confuses table and field evaluation.

B. Bottom to top: Table ACL, Table.Field ACL, Parent Table.Field ACLIncorrect– The correct order isTable ACL → Parent Table ACL → Wildcard ACL, not Table.Field ACL order.

C. General to specific: Table ACL, Table.Field ACL, Parent Table, Field ACLIncorrect– ServiceNow appliesspecific ACLs first, not general ones.

D. Top to bottom: Wildcard Table ACL, Parent Table ACL, Table ACLIncorrect– Wildcard ACLs are evaluatedlast, not first.

Incorrect Answer Choices Analysis:

ServiceNow Docs – Access Control Evaluation Order???? Access Control Rules

ServiceNow Community – ACL Best Practices???? Understanding ACL Processing

Official ServiceNow Documentation References: