CIS-HR practice question 10 of 10

If you have both Admin and HR Admin roles and wanted to configure an Access Control for the Employee Relations Cases table, what must first be done?

Full set: 136 questions

Answer options

A: Add the Delegated Developer role to your User record

B: From the User dropdown in the banner, elevate your role to security_admin Correct answer

C: Manually add the security_admin role to your User record

D: Nothing would need to be done

Correct Answer:

B. From the User dropdown in the banner, elevate your role to security_admin

Explanation

In ServiceNow, configuring Access Control Lists (ACLs) requires the securityadmin role. Even with Admin and HR Admin roles, you must elevate to securityadmin to create or modify ACLs. ServiceNow implements role elevation as a security best practice, requiring users to explicitly elevate privileges when performing high-security operations. This is done through the user menu in the banner by selecting "Elevate Roles" and choosing securityadmin. This temporary elevation ensures that security-sensitive operations are performed intentionally and can be audited.

Why Incorrect

A. Delegated Developer role is for scoped application development, not ACL configuration.
C. Manually adding securityadmin violates least privilege principle; elevation is the proper method.
D. Admin role alone cannot create ACLs; securityadmin elevation is mandatory.

References

- ServiceNow Product Documentation

"Access Control Lists"

Security Administration Guide

Section 3.2

- ServiceNow Official Documentation

"Role Elevation and High Security Settings"

System Security

Pages 45-47

- ServiceNow Implementation Guide

"HR Service Delivery Security Model"

Chapter 8

Sections 8.3-8.4

Keep practicing

Take the free CIS-HR practice test

Ten exam-style questions with answers and explanations, plus the exam facts and study guides.

Start the free practice test