CSA · Question #144
Your customer requires that they be able to monitor which users are performing impersonations in their instance. What would you do to meet that requirement?
The correct answer is C. Activate the glide.sys.log_impersonation prop. To monitor users performing impersonations, activate a specific system property that enables logging of these events.
Question
Your customer requires that they be able to monitor which users are performing impersonations in their instance. What would you do to meet that requirement?
Options
- AAdd the role Log Write [sn_log_write] to the Impersonator Group
- BCreate user update set for impersonation tracking
- CActivate the glide.sys.log_impersonation prop
- DFrom User icon, select Elevate Roles
- EOn the Impersonator role record, right click and select Create Log
How the community answered
(20 responses)- B5% (1)
- C90% (18)
- D5% (1)
Why each option
To monitor users performing impersonations, activate a specific system property that enables logging of these events.
Adding a role like `Log Write` grants permission to write to logs but does not automatically configure the system to log impersonation events.
Update sets are used to migrate configuration changes between instances, not for tracking real-time user activities like impersonations.
Activating the `glide.sys.log_impersonation` system property enables the logging of impersonation events, recording which users are performing impersonations in the system logs, thereby allowing administrators to monitor this activity.
Elevating roles is a temporary security measure to gain higher privileges for specific tasks, not a method for monitoring who performs impersonations.
There is no standard 'Create Log' action directly on a role record that specifically configures impersonation logging; system properties control this behavior.
Concept tested: Impersonation logging configuration
Source: https://docs.servicenow.com/bundle/utah-platform-administration/page/administer/users-and-groups/task/impersonate-a-user.html
Topics
Community Discussion
No community discussion yet for this question.