Servicenow Certified System Administrator CSA · Free Practice Question Medium
Question 54
There is a business requirement to restrict incident reporting to specific roles for better governance. The Development team decided to add a new access control (ACL), so only those roles can view the contents of the reports on the incident table.
What access control operation should they use to allow this access on the incident table?
-
A
report_on
-
B
report_view
-
C
read
-
D
execute
-
E
add_to_list
Reveal correct answer
Correct answer: B
Explanation
You can secure access and view the reports in the dashboards using the improved report_view access control lists (ACLs).
The report_view operation is a record-type access control list (ACL) that restricts access to reports. Only users with one of the required roles can view reports containing the restricted resource.
There are two kinds of report_view access control lists (ACLs): report_view table ACLs and report_view field ACLs. report_view table ACLs prevent users from viewing report content based on the table specified in the ACL. report_view field ACLs prevent users from viewing reports that use the field specified in the ACL in the group by row, column or aggregation.
For example, a report_view field ACL grants the report_admin role viewing access to the salary field in an HR table. When users with the itil or report_user role access a report grouped on the salary field, they see: Access to this content denied based on report_view field ACLs.
Screenshot 1: List of report_view Access Controls on the Incident table
Screenshot 2: Example of an Access Control that allows report_view for all fields in the incident for users with the role (sn_incident_read, itil)
Learn more here!
Learning Domains:
Database Management - Application/Access Control
Configuring Applications for Collaboration - Reporting, Dashboards, and Performance Analytics
First introduced: Tokyo release
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
