In addition to creating new ACLs or modifying existing ones, you can configure other aspects of ACL functionality.

Deny ACL rules

Deny-Unless

Query ACL rules

TaskDescription
Apply ACL script conditions to reference fields Enable a property to allow script conditions to apply to reference fields if you want to control access to the data that a reference field displays on a form or in a list. There might be an impact to the performance of your instance if you enable this.
Apply ACLs to AJAXGlideRecord (client-side Glide record) Apply ACLs to GlideAjax API calls so that the system queries only the data that the currently connected user has rights to access.
Evaluate the admin override at the access level Force ACL evaluation for admin overrides at the access level. By default, users with the admin role automatically pass the permissions check for this ACL rule when the Admin Overrides option is selected on the ACL rules form.
Use ACL debugging and troubleshooting tools Use tools like the ACL watcher, field level debugging, and access ACL rule output messages to help you troubleshoot and debug ACLs.