CSA · Question #278
Which admin role is required to make changes to High Security Settings?
The correct answer is D. security_admin. The security_admin role is specifically required to manage and make changes to High Security Settings, preventing standard admin users from inadvertently altering critical security configurations.
Question
Which admin role is required to make changes to High Security Settings?
Options
- Ahigh_sec_admin
- Bsn_acl_admin
- Cadmin
- Dsecurity_admin
How the community answered
(48 responses)- A2% (1)
- B8% (4)
- C2% (1)
- D88% (42)
Why each option
The `security_admin` role is specifically required to manage and make changes to High Security Settings, preventing standard `admin` users from inadvertently altering critical security configurations.
`high_sec_admin` is not a standard, recognized role in ServiceNow for this purpose.
`sn_acl_admin` is not a standard, recognized role in ServiceNow for managing high security settings; ACLs are managed by `security_admin` for elevated ones.
The `admin` role has broad access but is explicitly restricted from modifying High Security Settings to enforce a separation of duties.
The `security_admin` role is an elevated privilege role designed to manage high security settings, including modifying Access Control Lists (ACLs) with `security_admin` required and other critical security configurations, providing a segregation of duties from the general `admin` role. This separation ensures that only authorized personnel can make sensitive security changes, enhancing the platform's overall security posture.
Concept tested: Security admin role for high security
Source: https://docs.servicenow.com/bundle/utah-platform-security/page/administer/roles/concept/c_SecurityAdminRole.html
Topics
Community Discussion
No community discussion yet for this question.