Who can maintain Access Control Lists (ACLs) in ServiceNow?

• A. All users with basic permissions
• B. Only regular users
• C. Only users with security_admin role
• D. Any user with a system role

Answer: (C)

Access Control Lists (ACLs) in ServiceNow are critical for defining the levels of access that users have to various resources within the platform, such as tables and records. Maintaining these ACLs requires a significant understanding of both security principles and the specific requirements of the organization.

The correct answer highlights that only users with the security_admin role can maintain ACLs. This role is specifically designed to allow those with high-level responsibilities in managing security settings to configure and adjust access controls appropriately. This includes creating, modifying, or deleting ACLs, ensuring that the highest level of security and compliance is maintained across the instance.

Contrary to this, users with basic permissions, regular users, or even those with just any system role may have limited capabilities within ServiceNow, typically focused on their functional areas, without the necessary access to manage security settings or permissions. The security_admin role is distinct in its permissions, which are tailored for effective governance and control over who can see or interact with data in the system.