User Administration & Security Questions
Learn to manage users, groups, and roles in ServiceNow. Understand Access Control Lists (ACLs) and how to implement security best practices.
Last reviewed:
About User Administration & Security
User Administration is the backbone of ServiceNow security. Every action in ServiceNow is controlled by a combination of users, groups, roles, and Access Control Lists (ACLs). Understanding this security model is essential for any System Administrator.
Why This Matters for Your Exam
User Administration accounts for approximately 15% of the CSA exam. Questions focus on how roles grant permissions, how groups organize users, and how ACLs control access to data. This is one of the most practical topics for day-to-day administration work.
Key Concepts to Master
Master the relationship between users, groups, and roles. Understand role inheritance and how 'contains' relationships work between roles. Know how ACLs evaluate conditions and the order of ACL evaluation. Be familiar with impersonation for testing purposes.
Exam Tips
Remember that a user needs BOTH a role AND ACL access to see data. Roles grant access to application modules, while ACLs control record-level access. Know the difference between 'admin' role capabilities and regular user permissions.
Practice Questions
30 questions availableWhich security mechanism controls record-level access to data in ServiceNow?
👆 Click an option above to select your answer
What role is required to modify Access Control Lists (ACLs) in ServiceNow?
👆 Click an option above to select your answer
What happens when elevated privileges are activated in ServiceNow?
👆 Click an option above to select your answer
In what order does ServiceNow evaluate Access Control rules?
👆 Click an option above to select your answer
What automatically happens when a new table is created in ServiceNow?
👆 Click an option above to select your answer
A user passes a table-level ACL but fails a field-level ACL. What access does the user have?
👆 Click an option above to select your answer
What does an upward arrow next to a user's avatar indicate in ServiceNow?
👆 Click an option above to select your answer
How do ACL rules for parent tables apply to child tables?
👆 Click an option above to select your answer
What are the three main security modules typically used by system administrators?
👆 Click an option above to select your answer
What limitation applies to users with the admin role when impersonating another user?
👆 Click an option above to select your answer
Which components does ServiceNow use to ensure security for CRUD operations? (Choose two)
👆 Click an option above to select your answer
What is the purpose of user impersonation in ServiceNow?
👆 Click an option above to select your answer
What must a user have to access data in ServiceNow?
👆 Click an option above to select your answer
A system administrator needs to grant a user temporary elevated access to modify ACLs. What is the recommended approach?
👆 Click an option above to select your answer
Which statements about the admin role in ServiceNow are true? (Choose two)
👆 Click an option above to select your answer
What is the recommended method for assigning roles to users in ServiceNow?
👆 Click an option above to select your answer
What indicates that elevated privileges are activated for an administrator's session?
👆 Click an option above to select your answer
In which order does ServiceNow evaluate access control rules?
👆 Click an option above to select your answer
Which actions can users WITHOUT any assigned roles perform in ServiceNow? (Choose 2)
👆 Click an option above to select your answer
Which statement about user impersonation is TRUE?
👆 Click an option above to select your answer
A user has the catalog_admin role. What access does this provide?
👆 Click an option above to select your answer
What is the purpose of the ServiceNow Security Center?
👆 Click an option above to select your answer
An administrator needs to prevent users in the 'itil' group from editing the Priority field on Incident records, but they should still be able to view it. Which approach is correct?
👆 Click an option above to select your answer
Which three elements make up an Access Control List (ACL) rule in ServiceNow? (Choose 3)
👆 Click an option above to select your answer
What is the evaluation order when multiple ACL rules apply to the same object and operation?
👆 Click an option above to select your answer
A new employee needs access to the Incident table but should NOT be able to delete any records. Which ACL configuration achieves this?
👆 Click an option above to select your answer
Which user property determines the language displayed in the ServiceNow interface?
👆 Click an option above to select your answer
What is the purpose of 'delegated administration' in ServiceNow?
👆 Click an option above to select your answer
Which of the following is NOT a valid method to assign a role to a user in ServiceNow?
👆 Click an option above to select your answer
What happens when an administrator activates the 'High Security Settings' plugin?
👆 Click an option above to select your answer
CSA is free. Next step: CAD or a CIS exam.
That's every CSA question. When you're ready for the next certification, each one is $9 for lifetime access, or get all 19 paid certifications for $49 (CSA stays free).