Which Access Control Object Name Applies to an Entire ServiceNow Table?

CSA By islever Editorial Last updated

Short answer

D incident.None

Question

Access Control rules are applied to a specific table, like the Incident table. What is the object name for a rule that applies to the entire Incident table (all rows and fields)?
  1. incident.*
  2. incident.all
  3. incident.!
  4. incident.None Correct Answer

Key Takeaways

The exam tests whether you know that table.None targets the whole table while table. is a field-level wildcard that excludes any field with its own ACL — the trap is choosing incident..

In ServiceNow, an ACL with the object name table.None (e.g., incident.None) applies to the entire table, covering all records and all fields. The community unanimously confirms answer D, noting that incident.* only covers fields not governed by a specific field-level rule.

Common mistake: Choosing A (incident.*) — candidates assume the wildcard means 'everything,' but incident.* actually represents all fields NOT controlled by a specific field rule, so it never covers the entire table once any field-level ACL exists.

Expert Analysis

Why the Answer Is Correct

In ServiceNow Access Control rules, the Object Name field uses a specific naming convention: table.None applies to the table as a whole, meaning all rows and all fields. Therefore, incident.None is the rule that governs access to the entire Incident table. Comment [1] and comment [3] both explain this precisely, and comment [2] cites page 368 of the SNAF study guide confirming D.

Why the Other Options Are Wrong

Option A (incident.) is the wildcard for fields: it applies to all fields on the table that are NOT controlled by a specific field-level rule, as comment [1] details — if even one field has its own ACL, incident. covers everything except that field. Options B (incident.all) and C (incident.!) are not valid object names in the ServiceNow ACL naming scheme and do not exist in official documentation. Only the None value has the special meaning of 'the entire table.'

Community Comment Notes

The vote distribution is 100% for D, and all substantive comments agree. Comment [1] gives the most useful technical distinction between None and , explaining the field-rule exclusion behavior. Comment [4] references page 158 of the Vancouver SNAF guide, stating that table.--None-- applies to the entire table while ---- represents all other fields, reinforcing the same conclusion from study-guide material.

Official Reference

https://docs.servicenow.com/bundle/vancouver-platform-security/page/administer/contextual-security/concept/access-control-rules.html

This link opens the official vendor documentation in a new tab.

Exam Strategy

Memorize the ACL naming trio: table.None = entire table, table.* = all fields without their own rule, and table.field = a specific field. When a question asks about 'all rows and fields' or 'the entire table,' immediately pick the None option and don't be baited by the wildcard.

Community Votes

D
100%

100% of anonymous learners picked answer D. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 4 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 4

  1. MACCA81 👍 2 Answered D
    incident.* rule applies to all fields on the table that are NOT controlled by a specific field rule. i.e. if there are no field rules on any of the field it can represent the whole table, but as long as there's even one specific field rule it will represent all the other fields in the table but NOT this one. Hence A cannot be the correct answer. incident.None rule represents access to the table as a whole. It's the correct answer.
  2. Kiekie 👍 2
    D. incident.None The answer is D. As seen in SNAF Page 368
  3. DeCharlie 👍 1 Answered D
    incident.None includes all fields and column (entire table) then comes the part where any specific field are not to be included which is done by include.field here comes to play the incident.* (wildcard) that includes all the fields except one defined by include.field. thus correct option will be incident.None
  4. chrisRY 👍 1
    Answer: table.--None-- applies to the entire table - Pg 158 Vancouver SNAF Table. --*-- Represents all other fields in the table

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Submitted for moderation before publishing. Keep it helpful and respectful.

Which ServiceNow ACL Rule Grants Full Table Access?

S-grade

Which three methods can ServiceNow use to notify users of events?

S-grade

Which Storefront Provides Pre-Built Spokes for Third-Party Integrations?

S-grade

Which ServiceNow Roles Are Required to Impersonate a User?

S-grade

Practice All CSA Questions

Access 368 questions with complete answers and detailed explanations.

View Full CSA Practice Test →

← Back to CSA Study Guide