hi everyone my name is Prana bhagat and I am a senior developer advocate here at servicenow and in today's video I'm gonna talk about security attribute which was released in the Vancouver release so a security attribute is a highly configurable piece of information about a subject which can be a user group or any recording service now when used in ACL or data filters provide you with A fine grain security configuration in a non-complex way if I have to explain you in a one line security attributes help you write security rules in a simplest way possible let's look into an example to see how it works so we are into the instance now the first thing I'll explain you is the use case that we are trying to do for that we have to go to the incident table and let me open all incident and let me open any record so in the incident table as you can see I have created a new field steps should reproduce the issue so what I'm trying to do is like if a user is part of the application Development Group then only the user will be able to write to this particular field so let's see how it can be done using ACL so let me go into the ACL in interest of time I have already created this particular ACL let's open it and I'll walk you through what I have written in the script so as you can see in the script it's a very simple script if the user is part of this application Development Group then it should return the answer equal to true if not it should return the answer equal to false so let me go ahead and make it active now what I'm gonna do is like I'm going to impersonate to Able tutor who is not part of the application Development Group and let's see what will happen and let's go to the incident table incident dot list and I'm going to open any record you can see I'm not able to edit this particular field now let me impersonate to someone who is part of the application Development Group in this case the user is Arya let's go ahead and impersonate to Arya now and now let's go into the incident list I can do incident dot list and what I'm going to do is like I'm gonna open this particular incident and you can see now I'm able to edit this particular field because Arya is part of the application Development Group now let's see how we can configure the same configuration using security attributes so I have to impersonate back to my admin account and to edit an ACL we have to elevate our permissions so let me Elevate to security admin role let's go to ACL again and let's open our the same ACL that we configured just now now instead of writing the script what I can do is like let's utilize security attribute I will just copy the name of the group and I'll just remove the script close the advanced option and let's utilize our group security attribute that is let's put the group name here application development and I can quickly save this form now let's repeat the same testing that we did just now firstly we're going to impersonate to Able tutor and I'm just going to open the same incident that I just opened you can see the able tutor is not able to edit this incident let's impersonate to Arya and now let's go back to the same incident that just that we just opened I'll open this record now Arya is able to edit it so that's how you can utilize security attributes in ACLS you can do the similar thing in data filters also now let's go into the security attribute and I'll show you what we get out of the box and here's the list of all the security attributes that are available out of the box I would recommend you to go through this list and play around with it so that you get some better idea about it and that's all I have for you in this video I hope you got some clarity about security attribute let me know in the comment section if you have any question thank you