Reference Qualifier: Filter Users by Role
A company has a custom table 'u_training_course' with a reference field to 'sys_user' named 'u_instructor'. The requirement is that only users with the 'instructor' role can be selected in this field. Which approach should be used to enforce this?
Quick Answer
A reference qualifier is correct because it is the mechanism ServiceNow gives you to filter what appears in a reference field's list of selectable records, and it operates directly at the query level rather than as a client-side visual restriction. When you attach a condition such as roles=instructor to the u_instructor field's qualifier, the platform builds that filter into the query it runs whenever someone opens the lookup, so only sys_user records that actually carry the instructor role are ever returned as options. This is a stronger and more reliable enforcement point than something like a client script that merely hides or validates a choice after the fact, because a reference qualifier prevents the invalid record from ever being presented in the first place, and it requires no custom scripting to maintain. The requirement in this scenario is purely about restricting which existing records are selectable based on a condition on those records, which is precisely the problem reference qualifiers were built to solve declaratively. Whenever you see a requirement phrased as 'only records matching some condition should be selectable in a reference field,' look for the reference qualifier as the answer before reaching for a script include, UI policy, or ACL, since those tools solve different problems like access control or field behavior rather than filtering the candidate list itself.
⚠ Common exam trap
Candidates often confuse client-side validation (client scripts) or post-save checks (business rules) with the correct declarative filtering mechanism (reference qualifier), which is the intended and most efficient approach for restricting reference field choices in ServiceNow.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Add a reference qualifier on the field to filter users with the 'instructor' role
A reference qualifier is the declarative way to filter the records available in a reference field on ServiceNow. By adding a condition like 'roles=instructor' to the reference qualifier of the 'u_instructor' field, only users with the 'instructor' role will appear in the lookup, enforcing the requirement at the database query level without custom scripting.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Create a business rule on the table to check the role and reject invalid selections
Why it's wrong here
Business rules run after submission, so invalid data can be saved momentarily.
- ✓
Add a reference qualifier on the field to filter users with the 'instructor' role
Why this is correct
Reference qualifiers restrict the list dynamically.
- ✗
Use a client script to validate the selection before form submission
Why it's wrong here
Client scripts can be bypassed by direct API calls.
- ✗
Configure an ACL on the reference field to restrict write access
Why it's wrong here
ACLs control permissions, not the list of selectable values.
Go deeper
Related to this question
About these practice questions
This SNOW-CAD question is part of Courseiva's 481-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on SNOW-CAD
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. A company has a custom table 'project_task' with a reference field to 'project'. The requirement is to ensure that only users in a specific group can select projects in a certain state. Which approach provides the most secure and maintainable solution?
hard- ✓ A.Use a reference qualifier on the project field that checks user group and project state.
- B.Use a data policy with a condition to restrict the reference field.
- C.Use a security rule to prevent selection of certain projects.
- D.Use a business rule to check group membership on insert/update.
Why A: Reference qualifiers are the standard way to dynamically filter the list of selectable records in a reference field based on conditions such as user group and project state. This approach provides immediate feedback in the UI and prevents invalid selections altogether. Option B (data policy) can enforce rules on submit but does not filter the picker, so users can still select invalid projects before submission. Option C (security rule) is designed for access control to records or modules, not for field-level filtering. Option D (business rule) would allow selection and then reject on insert/update, leading to a poor user experience and requiring rollback logic. Therefore, a reference qualifier is the most secure and maintainable solution.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SNOW-CAD practice question is part of Courseiva's free ServiceNow certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SNOW-CAD exam.