---
sourceDocument: Australia API Reference
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/de-DE/api-reference

 Release :

    - australia

ft:locale :

    - de-DE

ft:publication_title :

    - Australia API Reference

ft:clusterId :

    - crapiref

bundleId :

    - crapiref

workflow :

    - Creator


---

# Configure a scripted REST API resource to require an ACL

# Configure a scripted REST API resource to require an ACL {#ariaid-title1}

* Freigeben Version: Australia
* 
* Aktualisiert 12. März 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 Minute Lesedauer

By default, API resources/endpoints inherit security settings from the parent API. Define custom Access Control Levels (ACLs) for a specific resource/endpoint to override the inherited settings.

## Vorbereitungen

Role required: web_service_admin or admin

## Warum und wann dieser Vorgang ausgeführt wird

The ACLs defined using the procedure in this document are only checked for authenticated users.

## Prozedur

1. Navigate to AllSystem Web ServicesScripted REST APIs.
2. Select a scripted REST API.
3. In the Resources related list, select a resource.
4. In the Security tab, select the Requires authentication check box.  
   You must select this check box to require an ACL for the resource. If you clear this check box, the resource becomes public and requires no credentials. Clear this check box only if you want to enable unauthenticated requests to access the resource, even if the parent REST service requires an ACL.
5. Select the Requires ACL authorization check box.
6. In the ACL field, select one or more ACLs that meet the security needs for the endpoint.  
   Select only those ACLs that have a Type of REST_Endpoint. Only users who have roles defined in the selected REST_Endpoint type ACL are granted access to this resource.

   Selecting an ACL for a resource overrides any ACLs selected for the parent web service. Leave this field empty to use the ACLs selected for the parent web service.
{#t_WbSvcOpRqACL__steps_pmq_njw_5r}
**Zugehörige Tasks**   

* [Configure a scripted REST API to require an ACL](https://servicenow-prod.fluidtopics.net/L_OVjAIlpnqJ4CIiE2Sjiw "Requests to scripted REST APIs respect platform ACLs, and the requesting user must meet any table ACL requirements to access instance data. Additionally, you can configure the scripted REST API to require a specific ACL.")
* [Add a path-based ACL for a scripted REST API](https://servicenow-prod.fluidtopics.net/LZnzQEUIgFGEjR2qKfsh5w "Path-based Access Control Levels (ACLs) enable you to define access control rules for scripted REST API endpoints using their resource path. This can be done independently of the ACL references on the operation record. Path-based ACLs enable more flexible security configurations, especially for read-only APIs and guest user experiences.")