What is Access Control designed to do?

• A. Enhance system performance
• B. Manage user roles and permissions
• C. Restrict user permissions from viewing and interacting with data
• D. Facilitate data backup procedures

Answer: (C)

Access Control is designed primarily to ensure that users have the appropriate permissions to view and interact with data within a system. It establishes a framework that defines who can access specific resources or data and what actions they can perform on those resources.

In the context of ServiceNow, Access Control rules determine the level of access that users have, based on their roles and the context of their requests. This design helps protect sensitive information and ensures compliance with security policies. By restricting user permissions, Access Control not only safeguards data but also reinforces the principle of least privilege, which is a key aspect of information security.

While managing user roles and permissions is related to Access Control, the focus of the correct answer specifically highlights the restriction of permissions, which is a critical function. Therefore, it is clear that the primary purpose of Access Control is to restrict user permissions, directly influencing how users interact with data in the system.