How sys_scoped_admin_acl_inheritance works

sys_scoped_admin_acl_inheritance allows a scoped application using Application Administration to fall back to Global ACLs.

The behavior is pretty simple:

  • ServiceNow looks for ACLs defined for the application scope first.
  • If none are found, and the table is listed in sys_scoped_admin_acl_inheritance, ServiceNow can evaluate the Global ACLs instead.
  • glide.security.scoped_administration.honor_global_acl also needs to allow this behavior.

This only applies to application-file tables that extend sys_metadata.

The important point: this doesn’t bypass ACLs. It prevents us from having to duplicate existing Global ACLs inside each application scope.

Latest Posts