SNOW-CAD Integrating and managing application data Practice Question
A large enterprise uses ServiceNow as its ITSM platform. They have an existing LDAP directory that contains user accounts and group memberships. They want to synchronize user accounts from LDAP into the ServiceNow user table (sys_user) and automatically assign roles based on group membership. The LDAP server supports both user and group synchronization. The administrator has configured an LDAP server record and a user import transform map. After running the LDAP user import, all users are created but none have roles assigned. The LDAP group import transform map is configured to load groups into the sys_user_group table and members into the member list. The administrator verified that the LDAP group import runs successfully and populates groups with members. However, the expected roles are still missing. What is the most likely cause and solution?
⚠ Common exam trap
Many exam-takers assume successful group and member import automatically assigns roles, overlooking the mandatory role-to-group mapping on the LDAP server record.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The administrator did not configure role-to-group mapping in the LDAP server record. Solution: define the mapping in the 'Role' related list on the LDAP server configuration.
In ServiceNow, role assignment via LDAP group synchronization requires explicit role-to-group mapping on the LDAP server record. Even when groups and members are imported correctly, roles are not automatically assigned unless the administrator defines which LDAP group corresponds to which ServiceNow role in the 'Role' related list on the LDAP server configuration. Without this mapping, the system has no instruction to link group membership to role inheritance.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The LDAP group import is not correctly associating users to groups. Solution: check the member attribute mapping in the group import transform map.
Why it's wrong here
The group import runs successfully and populates members, so the issue is not with membership.
- ✓
The administrator did not configure role-to-group mapping in the LDAP server record. Solution: define the mapping in the 'Role' related list on the LDAP server configuration.
Why this is correct
Roles are assigned by mapping LDAP groups to ServiceNow roles in the LDAP server configuration.
- ✗
The LDAP user import is not populating the 'group' field on the user record. Solution: add a field mapping to copy the group DN.
Why it's wrong here
The group field is not used for role assignment; roles come from group membership via the LDAP server role mapping.
- ✗
The LDAP user import transform map does not have a coalesce field set, causing duplicate users. Solution: set coalesce on the user ID field.
Why it's wrong here
Coalesce prevents duplicates, but roles are still not assigned.
Go deeper
Related to this question
About these practice questions
One of 481 original SNOW-CAD practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SNOW-CAD practice question is part of Courseiva's free ServiceNow certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SNOW-CAD exam.