If you have both Admin and HR Admin roles and wanted to configure an Access Control for the Employee Relations Cases table, what must first be done?

In ServiceNow, configuring Access Control Lists (ACLs) requires the securityadmin role. Even with Admin and HR Admin roles, you must elevate to securityadmin to create or modify ACLs. ServiceNow implements role elevation as a security best practice, requiring users to explicitly elevate privileges when performing high-security operations. This is done through the user menu in the banner by selecting "Elevate Roles" and choosing securityadmin. This temporary elevation ensures that security-sensitive operations are performed intentionally and can be audited.

A. Delegated Developer role is for scoped application development, not ACL configuration.

C. Manually adding securityadmin violates least privilege principle; elevation is the proper method.

D. Admin role alone cannot create ACLs; securityadmin elevation is mandatory.

- ServiceNow Product Documentation

"Access Control Lists"

Security Administration Guide

Section 3.2

- ServiceNow Official Documentation

"Role Elevation and High Security Settings"

System Security

Pages 45-47

- ServiceNow Implementation Guide

"HR Service Delivery Security Model"

Chapter 8

Sections 8.3-8.4