Exam CSA topic 1 question 345 discussion

additional reference in ServiceNow Administrator Fundamentals eBook Page 60 The None access Control (which appears as just sys_user) granted all rows and all fields to both the table_admin and table_user roles.

Best Practice: - when creating .* Access Controls, also create a None Access Control, because only None grants access to records - when writing an ACL that mostly grants access, use only None - when writing an ACL that mostly denies access, use None and .*

Completely agree with kanafuka225. The table.* is allowing access to both of these new roles to all rows and fields as specified. Conversely, table.none is restricting all row and field access to these two roles.

none will be used to grant all accesses to the record

.none is the table level which grants access to all fields and rows.

The customer .* ACL rule would grant access to all rows and all fields to both the customer_table_admin and customer_table_user roles because it uses a wildcard (*) to match any operation on the customer table. The other options are either too restrictive or too broad. References1: Access control list rules - Product Documentation: Utah - ServiceNow4: Access Controls - ServiceNow Elite