The security_admin role in ServiceNow is required to make changes to High Security Settings (now part of System Security Settings). What Can the security_admin Role Do? Modify high-security settings in ServiceNow. Elevate privileges to make changes to sensitive security configurations. Manage Access Control Lists (ACLs) to define security rules. Why Elevation is Required? Users with the admin role alone cannot modify high-security settings. The security_admin role requires elevation via the "Elevate Role" option in the user menu. This ensures that only authorized administrators can modify security-related configurations. Why Other Answers Are Incorrect: B . sn_ad_admin - No such role exists in ServiceNow. C . high_sec_admin - This is not a valid ServiceNow role. D . admin - The admin role alone does not grant access to high-security settings without elevating to security_admin. Reference from Certified System Administrator (CSA) Official Documentation: ServiceNow Security Admin Role and Elevated Privileges ServiceNow CSA Training Module: "Managing Security Settings and Access Controls"