How to create REST API Access Policies for specific tables in ServiceNow to control table-level API access.Issue By default, when creating a REST API Access Policy in ServiceNow, the policy may apply to all tables, which could unintentionally grant or restrict access to multiple tables beyond the intended scope.Customers often need to apply such policies only to specific tables to enforce strict access control and align with security best practices. Release Yokohama onwards Resolution Prerequisites Required Permissions admin role or equivalent system administration privilegesAccess to System Web Services moduleAPI-related roles: api_admin or rest_api_policy_admin (if available in your instance) System Requirements ServiceNow Version: Jakarta or later (recommended: latest patch version)REST API Plugin: Must be activated on your instanceWeb Services: Web Services plugin must be enabled Knowledge Prerequisites Basic understanding of REST API concepts (GET, POST, PUT, DELETE, PATCH methods)Familiarity with ServiceNow table names and structuresUnderstanding of authentication methods in ServiceNow (Basic Auth, OAuth, SAML, etc.) You can create REST API Access Policies that apply only to selected tables by following the steps below: Navigate to System Web Services > REST API Access Policy.Click New to create a policy, or open an existing one to edit.In the policy form, uncheck the option "Apply to all tables".Once unchecked, the "Tables" field will appear.Use the Tables field to specify one or more tables to which the policy should apply.Configure other conditions as needed.Save and activate the policy by clicking Submit or Update. Test the policy in a sub-production environment to confirm proper behavior before moving to production. Related Links<!-- /*NS Branding Styles*/ --> .ns-kb-css-body-editor-container { p { font-size: 12pt; font-family: Lato; color: var(--now-color--text-primary, #000000); } span { font-size: 12pt; font-family: Lato; color: var(--now-color--text-primary, #000000); } h2 { font-size: 24pt; font-family: Lato; color: var(--now-color--text-primary, black); } h3 { font-size: 18pt; font-family: Lato; color: var(--now-color--text-primary, black); } h4 { font-size: 14pt; font-family: Lato; color: var(--now-color--text-primary, black); } a { font-size: 12pt; font-family: Lato; color: var(--now-color--link-primary, #00718F); } a:hover { font-size: 12pt; color: var(--now-color--link-primary, #024F69); } a:target { font-size: 12pt; color: var(--now-color--link-primary, #032D42); } a:visited { font-size: 12pt; color: var(--now-color--link-primary, #00718f); } ul { font-size: 12pt; font-family: Lato; } li { font-size: 12pt; font-family: Lato; } img { display: ; max-width: ; width: ; height: ; } } https://www.servicenow.com/docs/bundle/yokohama-platform-security/page/integrate/authentication/task/create-api-access-policy.html