Chapter 3 of 6 · ServiceNow CAD
Security and Restricting Access
Menu and module roles, access controls, GlideSystem security scripts and scope protection.
- 4topics
- 18 minfast track
- 1diagrams and exhibits
- 20%of the exam
Topics in this chapter
Take them in order, or jump to the one you need.
- 1Restricting Access to Applications and ModulesServiceNow CAD: restrict application menus and modules with roles, build user and admin roles for an app, and why hiding…5 min
- 2Creating, Testing and Debugging Access ControlsServiceNow CAD access controls: automatic table ACLs, manual ACLs, Deny-Unless and Allow-If, table then field order, and Debug…Diagram5 min
- 3Scripting Security with GlideSystemServiceNow CAD: script security with GlideSystem, using gs.hasRole, gs.getUserID and gs.getUser().isMemberOf in ACL scripts and…4 min
- 4Protecting Application Artifacts with ScopeServiceNow CAD: protect app artifacts with scope, using Application Access settings, script include access, cross-scope…4 min
About this chapter
What this chapter covers
Security and Restricting Access is 20% of the ServiceNow Certified Application Developer exam. It covers how a developer keeps an application's menus, records, fields and scripts away from people and applications that should not reach them.
The chapter has four parts: hiding application menus and modules with roles, building and debugging access controls (ACLs), writing security logic with GlideSystem methods, and using application scope to protect the application's own artifacts from other applications.
Questions are short scenarios, recall questions or code-reading questions: a requirement is described and you pick the role, ACL setting, script line or scope setting that meets it. Some are single-answer and some are multiple-select questions that state the count, such as "(Choose two.)". There are no exhibits.
How the topics fit together
Roles decide what appears in the navigator, but that is convenience, not protection. ACLs are the real server side check on every record and field. When a role or condition is not enough, a script inside the ACL (or a business rule) uses GlideSystem methods to decide. Scope then protects the application from other applications rather than from users.
- Menu and module questions ask which role setting hides or shows navigation.
- ACL questions ask how a rule is built, in which order rules are checked and how to debug a denial.
- GlideSystem questions ask which method returns the user, the role check or the group check.
- Scope questions ask which Application Access setting or script include setting blocks another application.
For every security question, first decide who is being kept out: a user (roles and ACLs) or another application (scope and Application Access). The answer sets live in different places.
How to use these pages
Each topic page has the same shape, so you can skim for what you need.
- What it is: the idea in plain words.
- How it works: the mechanism, with tables and examples.
- What to remember for the exam: the facts to memorize and how questions are phrased.
- Common mistakes: the classic traps.
- Check yourself: three questions to test your understanding.
Ready for more practice?
The full ServiceNow CAD question bank has 600 questions, with timed practice exams and an explanation for every answer.
This study guide is independent and is not affiliated with, endorsed by, or sponsored by ServiceNow. Vendor names, certification names and exam codes are trademarks of their respective owners and are used for identification only.