Which statement about the web service access option is true?

Which statement about the web service access option is true?

• A. Web service access is unrestricted
• B. The web service user must have permission to access the table records
• C. Web service access bypasses table permissions
• D. No authentication is required for web service access

Answer: (B)

Access to data via web services is controlled by who is making the call. In ServiceNow, every API request runs under a user context, and the platform enforces the same access controls (ACLs) on tables and records as it does for any other data access. If the web service user doesn’t have the necessary permission for a table or the specific records being accessed, the request will be denied. That’s why this statement is true: the web service user must have permission to access the table records. In practice, you manage this by assigning appropriate roles or per-table ACLs to the integration user, ensuring they can read or modify only what’s needed. The other options conflict with how ServiceNow secures data: web service access is not unrestricted, it does not bypass table permissions, and authentication is required for web service access.

Access to data via web services is controlled by who is making the call. In ServiceNow, every API request runs under a user context, and the platform enforces the same access controls (ACLs) on tables and records as it does for any other data access. If the web service user doesn’t have the necessary permission for a table or the specific records being accessed, the request will be denied. That’s why this statement is true: the web service user must have permission to access the table records.

In practice, you manage this by assigning appropriate roles or per-table ACLs to the integration user, ensuring they can read or modify only what’s needed. The other options conflict with how ServiceNow secures data: web service access is not unrestricted, it does not bypass table permissions, and authentication is required for web service access.