Show ACL execution plan

task australia Updated Sep 10, 2026 1 min read t_ShowACLExecutionPlan.md

Raw file servicenow.com

Administrators can view how ACLs relate to each other by viewing an execution plan for any ACL in the instance.

Before you begin

Role required: security_admin

Procedure

Elevate to a privileged role.
Navigate to System Security > Access Control (ACL).
Open an ACL with the type record.

[Omitted image "acl-type-record.png"] Alt text: ACL type equals "record."

Click Show ACL Execution Plan in the Related Links section.

The security rules window appears for the ACL. The example displays the execution plan for "vtb_task".

[Omitted image "ACL_execution_plan.png"] Alt text: An ACL execution plan

UI item	Description
Title	The name of the ACL.
Tab name	If the ACL is create, read, write, or delete.
Row level	Row-level ACLs that run on this table.
Field level	Field-level ACLs that run only on this field (or column in the table).

Click Show all to show all related ACLs, including those ACLs that are overridden and generic ACLs that apply to all records.

Overridden ACLs have a line through the name, and generic ACLs have the wildcard character asterisk (*) for the name.
Show only the immediate ACLs related to the one you are viewing and hide the ACLs on tables from which the ACL table is extended and the generic wildcard (*) ACLs by clicking Show Effective.

53 lines · 2.1 KB Wrap lines

---
title: Show ACL execution plan
description: Administrators can view how ACLs relate to each other by viewing an execution plan for any ACL in the instance.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/platform-security/access-control/t\_ShowACLExecutionPlan.html
release: australia
product: Access Control
classification: access-control
topic_type: task
last_updated: "2026-09-10"
reading_time_minutes: 1
breadcrumb: [ACL configuration watcher, ACL debugging tools, Advanced ACL configuration, Access Control Lists \(ACLs\), Access Management]
---

# Show ACL execution plan

Administrators can view how ACLs relate to each other by viewing an execution plan for any ACL in the instance.

## Before you begin

Role required: security\_admin

## Procedure

1.  [Elevate to a privileged role](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/t_ElevateToAPrivilegedRole.md).

2.  Navigate to **System Security** &gt; **Access Control \(ACL\)**.

3.  Open an ACL with the type **record**.

    \[Omitted image "acl-type-record.png"\] Alt text: ACL type equals "record."

4.  Click **Show ACL Execution Plan** in the Related Links section.

    The security rules window appears for the ACL. The example displays the execution plan for "vtb\_task".

    \[Omitted image "ACL\_execution\_plan.png"\] Alt text: An ACL execution plan

    |UI item|Description|
    |-------|-----------|
    |Title|The name of the ACL.|
    |Tab name|If the ACL is create, read, write, or delete.|
    |Row level|Row-level ACLs that run on this table.|
    |Field level|Field-level ACLs that run only on this field \(or column in the table\).|

5.  Click **Show all** to show all related ACLs, including those ACLs that are overridden and generic ACLs that apply to all records.

    Overridden ACLs have a line through the name, and generic ACLs have the wildcard character asterisk \(\*\) for the name.

6.  Show only the immediate ACLs related to the one you are viewing and hide the ACLs on tables from which the ACL table is extended and the generic wildcard \(\*\) ACLs by clicking **Show Effective**.