ManagingCI classes and Principal Class designationis aschema-level CMDB activitythat directly impacts how CIs appear in ITSM processes such as Incident, Change, and Problem. InServiceNow, these activities require specific administrative privileges to ensure governance, security, and upgrade safety.
Thesn_cmdb_adminrole is required because it provides administrative access to CMDB structures, including CI class hierarchy management, Principal Class configuration, and overall CMDB governance. Without this role, users cannot add, remove, or govern CI classes effectively.
Thepersonalize_dictionaryrole is also required because adding or removing CI classes involvesdictionary-level changes. CI classes are implemented as tables that extend the CMDB schema, and modifying the Principal Class filter relies on dictionary metadata. This role grants permission to create, modify, or remove class definitions safely.
Thesn_csdm_adminrole focuses on managing CSDM constructs (domains, services, lifecycle alignment) but does not grant dictionary or schema modification rights. Thecmdb_query_builderrole is used only for querying and reporting and does not allow structural changes.
Therefore, the two required roles arepersonalize.dictionaryandsn_cmdb_admin, makingOptions A and Bcorrect.
