CSA Users, Groups, and Roles 2 — Questions and Answers
Question 1: Which table stores user records in ServiceNow?
- sys_user (Correct answer)
- user_profile
- cmn_user
- sc_user
Correct answer: sys_user
User records are stored in the sys_user table, which is the core table for all platform users.
Question 2: A user needs access to a specific application but should not have admin rights. What is the best approach?
- Grant the admin role temporarily
- Assign only the role required for that application (Correct answer)
- Add the user to the admin group
- Enable elevated privileges on the user record
Correct answer: Assign only the role required for that application
Following the principle of least privilege, you should assign only the specific role required for the application.
Question 3: What happens when a role is assigned to a group in ServiceNow?
- Only group managers inherit the role
- All current and future members of the group inherit the role (Correct answer)
- The role must be separately assigned to each member
- Only active members at the time of assignment receive the role
Correct answer: All current and future members of the group inherit the role
Roles assigned to a group are automatically inherited by all current and future members of that group.
Question 4: Which field on the sys_user record controls whether a user can log into ServiceNow?
- Active (Correct answer)
- Locked out
- Web service access only
- Internal Integration User
Correct answer: Active
The 'Active' field on a user record must be set to true for the user to be able to log in.
Question 5: What is a 'delegate' in the context of ServiceNow user management?
- A user who manages group membership
- A user authorized to act on behalf of another user for approvals (Correct answer)
- A role that grants limited admin access
- A group manager with elevated permissions
Correct answer: A user authorized to act on behalf of another user for approvals
A delegate is a user who is authorized to act on behalf of another user, primarily for approval tasks.
Question 6: Which of the following correctly describes role containment in ServiceNow?
- A role can include other roles, granting all their permissions (Correct answer)
- Roles cannot be nested and must be assigned individually
- Only system roles can contain other roles
- Role containment is only available in scoped applications
Correct answer: A role can include other roles, granting all their permissions
ServiceNow supports role containment, where one role can include other roles, effectively granting all contained role permissions.
Question 7: Where do you configure the default group for new users created via LDAP import?
- LDAP OU Definition
- User Administration > Default Group
- LDAP Server record > Default User Group field (Correct answer)
- System Properties > Security
Correct answer: LDAP Server record > Default User Group field
The Default User Group field on the LDAP Server record determines which group new LDAP-imported users are placed into.
CSA Users, Groups, and Roles 2
Which table stores user records in ServiceNow?