Which statement describes how access to application table records is granted?

Which statement describes how access to application table records is granted?

• A. All conditions configured in the access controls must evaluate to true
• B. For access to be granted, any of the following must evaluate to true: conditions, scripts, or user roles
• C. The user must have all roles specified in the required roles related list
• D. Access is granted automatically if no ACLs exist

Answer: (B)

Access to records is granted when any one of these checks evaluates to true: the user has one of the roles listed on the ACL, the Condition field on the ACL evaluates to true, or the Script field returns true. ServiceNow uses OR logic across these checks, so a single passing condition suffices to grant access. This is why saying access can come from either matching roles, a true condition, or a true script is the correct description. The other ideas—requiring all conditions or all roles, or granting access automatically when no ACL exists—don’t align with how ACLs are evaluated, where a lack of a passing check means access is denied.

Access to records is granted when any one of these checks evaluates to true: the user has one of the roles listed on the ACL, the Condition field on the ACL evaluates to true, or the Script field returns true. ServiceNow uses OR logic across these checks, so a single passing condition suffices to grant access. This is why saying access can come from either matching roles, a true condition, or a true script is the correct description. The other ideas—requiring all conditions or all roles, or granting access automatically when no ACL exists—don’t align with how ACLs are evaluated, where a lack of a passing check means access is denied.