SNOW-CSA Application Rules, ACL and Notifications Practice Question
A system administrator is configuring ACLs for a custom table 'u_employee_info' that should be visible to all employees but editable only by HR managers. The administrator creates two ACLs: one read ACL for the 'employee' role with type 'read', and one write ACL for the 'hr_manager' role with type 'write'. However, employees with the 'employee' role report that they cannot see any records in the table. The administrator verifies that the ACLs are active. What is the most likely issue?
⚠ Common exam trap
It's easy for candidates to assume ACLs are inherited or that a write ACL implicitly grants read access, but ServiceNow requires separate ACLs for each operation and exact role name matching.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The read ACL is set to require a role 'snc_employee' instead of 'employee'.
ServiceNow ACLs are role-based, and the read ACL must specify the exact role name as it exists in the system. If the role is named 'snc_employee' but the ACL references 'employee', the ACL will not match, and the system will deny read access by default. The administrator likely misconfigured the role name in the ACL condition.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The read ACL is set to type 'record' instead of 'table'.
Why it's wrong here
Wrong: Type 'record' also works for read, but type 'table' is more common; both would work.
- ✗
The table 'u_employee_info' has no 'read' ACL defined by default, so access is denied.
Why it's wrong here
Wrong: A read ACL is defined.
- ✗
The write ACL is overriding the read ACL because it has a higher priority.
Why it's wrong here
Wrong: ACLs are ORed; write doesn't affect read.
- ✓
The read ACL is set to require a role 'snc_employee' instead of 'employee'.
Why this is correct
Correct: Role names must exactly match.
Visual reference
Go deeper
Related to this question
About these practice questions
Courseiva writes every SNOW-CSA question from scratch — 504 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SNOW-CSA practice question is part of Courseiva's free ServiceNow certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SNOW-CSA exam.