SNOW-CSA Application Rules, ACL and Notifications Practice Question
An administrator is troubleshooting an ACL that grants 'write' access to the 'incident' table for the 'itil' role. Despite the ACL being active, users with the 'itil' role cannot update incidents. The administrator confirms that no other write ACLs exist. What is the most likely reason?
⚠ Common exam trap
The trap here is that candidates often focus solely on ACLs and overlook the form layout's 'Required roles' setting, assuming that ACL permissions alone control all write operations, when in fact form-level restrictions can override ACL grants.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The 'Required roles' field on the 'incident' table form layout requires a different role to update.
The most likely reason is that the 'Required roles' field on the 'incident' table form layout restricts update operations to a specific role that the 'itil' users do not have. Even though the ACL grants 'write' access to the 'itil' role, the form layout's 'Required roles' setting overrides ACL permissions by preventing the form from being submitted or updated by users without the specified role. This is a common misconfiguration where form-level restrictions are overlooked during ACL troubleshooting.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
The 'Required roles' field on the 'incident' table form layout requires a different role to update.
Why this is correct
Correct: Form-level required roles can override ACLs for UI actions.
- ✗
The ACL is defined on a different table that extends 'incident'.
Why it's wrong here
Wrong: ACLs on parent tables apply to child tables, but the administrator checked.
- ✗
There is a read ACL that denies read access, which prevents any write operations.
Why it's wrong here
Wrong: Read and write ACLs are independent.
- ✗
The table is set to 'High Security' in the application properties.
Why it's wrong here
Wrong: High Security settings affect visibility but not ACL evaluation.
Visual reference
Go deeper
Related to this question
About these practice questions
This SNOW-CSA question is part of Courseiva's 504-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SNOW-CSA practice question is part of Courseiva's free ServiceNow certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SNOW-CSA exam.