nerdexam
ServiceNow

CSA · Question #278

Which admin role is required to make changes to High Security Settings?

The correct answer is D. security_admin. The security_admin role is specifically required to manage and make changes to High Security Settings, preventing standard admin users from inadvertently altering critical security configurations.

Submitted by sofia.br· Apr 18, 2026Database Management and Platform Security

Question

Which admin role is required to make changes to High Security Settings?

Options

  • Ahigh_sec_admin
  • Bsn_acl_admin
  • Cadmin
  • Dsecurity_admin

How the community answered

(48 responses)
  • A
    2% (1)
  • B
    8% (4)
  • C
    2% (1)
  • D
    88% (42)

Why each option

The `security_admin` role is specifically required to manage and make changes to High Security Settings, preventing standard `admin` users from inadvertently altering critical security configurations.

Ahigh_sec_admin

`high_sec_admin` is not a standard, recognized role in ServiceNow for this purpose.

Bsn_acl_admin

`sn_acl_admin` is not a standard, recognized role in ServiceNow for managing high security settings; ACLs are managed by `security_admin` for elevated ones.

Cadmin

The `admin` role has broad access but is explicitly restricted from modifying High Security Settings to enforce a separation of duties.

Dsecurity_adminCorrect

The `security_admin` role is an elevated privilege role designed to manage high security settings, including modifying Access Control Lists (ACLs) with `security_admin` required and other critical security configurations, providing a segregation of duties from the general `admin` role. This separation ensures that only authorized personnel can make sensitive security changes, enhancing the platform's overall security posture.

Concept tested: Security admin role for high security

Source: https://docs.servicenow.com/bundle/utah-platform-security/page/administer/roles/concept/c_SecurityAdminRole.html

Topics

#ServiceNow Roles#High Security Settings#Security Administration#Access Control

Community Discussion

No community discussion yet for this question.

Full CSA Practice