Which statement is true regarding access control rules?

• A. A user must pass at least one ACL rule
• B. A user can bypass all rules through admin access
• C. Field access is not dependent on table ACL rules
• D. If a user fails a table ACL rule, access to all fields is denied

Answer: (D)

The statement affirming that if a user fails a table ACL rule, access to all fields is denied is true. Access Control Rules (ACLs) in ServiceNow function as gatekeepers that determine what data users can see or manipulate at the table and field level. If a user does not meet the conditions specified in a table-level ACL, they are effectively barred from accessing the records within that table entirely.

In ServiceNow, the ACL structure operates hierarchically: if a user is denied access at the table level, they cannot interact with any associated fields, as their permissions to view or modify those records have been completely revoked. This is critical for maintaining data security and integrity within the platform.

The other statements do not hold true within the context of how ServiceNow manages access control. For example, suggesting that a user can bypass all rules through admin access does not align with the operational standards expected of a secure environment, as it is essential to have some level of accountability even for admin activities. Similarly, field access remains dependent on both table and field-specific ACLs, and having to pass at least one ACL rule does not capture the complete picture of how access controls work within ServiceNow.