Skip to content

Commit 22acd9d

Browse files
Create README.md
1 parent d09071b commit 22acd9d

File tree

1 file changed

+25
-0
lines changed
  • Server-Side Components/Script Includes/ACL Audit Utility

1 file changed

+25
-0
lines changed
Lines changed: 25 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,25 @@
1+
# ACL Audit Utility for ServiceNow
2+
3+
## Overview
4+
5+
This script audits Access Control Lists (ACLs) in your ServiceNow instance to identify potential security misconfigurations. It helps ensure that ACLs are properly configured and do not unintentionally expose sensitive data.
6+
7+
## Features
8+
9+
- Detects **inactive ACLs**
10+
- Flags ACLs with **no condition or script**
11+
- Warns about **public read access** (ACLs with no roles assigned)
12+
- Logs findings using `gs.info()` and `gs.warning()` for visibility
13+
14+
## Usage
15+
16+
1. Navigate to **System Definition > Script Includes** in your ServiceNow instance.
17+
2. Create a new Script Include named `ACL_Audit_Utility`.
18+
3. Paste the contents of `ACL_Audit_Utility.js` into the script field.
19+
4. Ensure the script is set to **Active** and **Accessible from all application scopes**.
20+
5. Run the script manually or schedule it using a **Scheduled Job**.
21+
22+
## Notes
23+
24+
- This script does not make any changes to ACLs; it only audits and logs findings.
25+
- You can extend the script to send email notifications or create audit records in a custom table.

0 commit comments

Comments
 (0)