For Application Access there is a configuration option called Allow access to this table via web services. Which one of the following statements is true when this option is selected?

Selecting “Allow access to this table via web services” simply opens the table to potential web-service traffic (SOAP, REST, RSS, JSON). All normal role- and ACL-based security still applies, so the caller must possess the permissions that permit read, create, update, or delete on that table; otherwise the request is rejected.

A. Setting does not differentiate CRUD verbs; it only toggles whether any web-service call reaches the table.
C. When the setting is cleared, the platform blocks every web-service call—permissions are irrelevant.
D. Documentation states the flag governs SOAP, REST, RSS, and JSON alike; not limited to SOAP.

1. ServiceNow Product Documentation – “Table application access settings” → property: Allow access to this table via web service (Tokyo & later), para. 2-3.

2. ServiceNow Developer Site – “Restrict table records using Application Access” §‘Web service access’, sentence: “If the option is cleared, no SOAP, REST, RSS, or JSON web-service operation can access the table, regardless of ACLs.”

3. ServiceNow Platform Security White Paper, rev 2022-08, p. 14, “Application Access and Web-Service Controls”.