Which ServiceNow ACL Rule Grants Full Table Access?

An administrator creates “customer_table_admin” and “customer_table_user” roles for the newly created "Customer Table”. Which ACL rule would grant access to all rows and all fields to both the customer_table_admin and customer_table_user roles?

  1. customer.none Source Reference Answer
  2. customer.all
  3. customer.field
  4. customer.*

Community Votes

A
60%
D
40%

60% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.

Community Insight

Tests your ability to distinguish between ACL syntax where the asterisk wildcard grants comprehensive access while the 'none' keyword explicitly revokes it.

Mastering table-level ACL naming conventions is essential for the CSA exam. Community consensus confirms that the wildcard pattern correctly grants universal row and field permissions.

Candidates frequently choose 'none' by mistake, incorrectly assuming it represents default or unrestricted access rather than recognizing it as a strict denial rule.

Community Discussion (6 comments)

7c9877a 👍 1 Selected: A
additional reference in ServiceNow Administrator Fundamentals eBook Page 60 The None access Control (which appears as just sys_user) granted all rows and all fields to both the table_admin and table_user roles.
szycha002 👍 1 Selected: A
Best Practice: - when creating . Access Controls, also create a None Access Control, because only None grants access to records - when writing an ACL that mostly grants access, use only None - when writing an ACL that mostly denies access, use None and .
gedgy 👍 2
Completely agree with kanafuka225. The table.* is allowing access to both of these new roles to all rows and fields as specified. Conversely, table.none is restricting all row and field access to these two roles.
SuiR 👍 1 Selected: A
none will be used to grant all accesses to the record
Prepper003 👍 3 Selected: A
.none is the table level which grants access to all fields and rows.
kanafuka225 👍 4 Selected: D
The customer . ACL rule would grant access to all rows and all fields to both the customer_table_admin and customer_table_user roles because it uses a wildcard () to match any operation on the customer table. The other options are either too restrictive or too broad. References1: Access control list rules - Product Documentation: Utah - ServiceNow4: Access Controls - ServiceNow Elite

Comments & Corrections

No comments yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Submitted for moderation before publishing. Keep it helpful and respectful.

Expert Analysis

Why the Answer Is Correct

The customer.* ACL rule utilizes a wildcard syntax that serves as a catch-all table-level permission. In ServiceNow, this pattern automatically grants the configured roles read, write, list, and search access across every record and field in the table, fulfilling the requirement precisely.

Why the Other Options Are Wrong

customer.none explicitly denies all access to the table, acting as a security override rather than a grant. customer.all and customer.field are not recognized ACL naming conventions or access levels within the ServiceNow platform. Confusing these invalid options with actual system syntax leads to incorrect selections.

Community Comment Notes

Experienced administrators clarify that . functions as an inclusive grant rule, while none strictly restricts permissions (Comment 1, 3). The discussion highlights best practices where . should be paired with none to manage granular exceptions safely (Comment 5). This debate underscores the importance of relying on official platform behavior over literal word interpretation.

Official Reference

https://docs.servicenow.com/bundle/rome-platform-administration/page/administer/access-control/concept/c_AccessControls.html

Exam Strategy

Memorize that * represents broad allowance and none represents explicit denial in ACL naming. Always map the question's requirement ('grant access') directly to the permissive wildcard syntax rather than guessing based on terminology.

Related Analysis

Which module in the Service Catalog application is used to c

A-Grade

After finishing your work on High Security Settings, what is

A-Grade

What are the different Notification methods that can be used

S-Grade

Practice All CSA Questions

Access 368 questions with complete answers and detailed explanations.

View Full CSA Practice Test →

← Back to CSA Study Guide