How to Return to Normal Admin Security After High Security Settings?

CSA By islever Editorial Last updated

Short answer

B Log out and back in

Question

After finishing your work on High Security Settings, what is a possible way to return to normal admin security levels?
  1. Select Global Update Set
  2. Log out and back in Correct Answer
  3. End Impersonation
  4. Select Normal role
  5. Use System Administration > Normal Security module

Key Takeaways

The exam tests that elevated privileges are session-scoped — the trap is confusing privilege elevation with impersonation or role selection.

In ServiceNow, the elevated security_admin privilege used for High Security Settings lasts only for the duration of the current user session. The community unanimously agrees that logging out and back in (or session timeout) returns the admin to normal security levels.

Common mistake: Choosing 'End Impersonation' (C) or 'Select Normal role' (D): impersonation is a separate feature for viewing the instance as another user, and there is no 'Normal role' to select — elevation is only removed by ending the session.

Expert Analysis

Why the Answer Is Correct

Elevated privileges in ServiceNow are granted temporarily through the Elevate Roles dialog and exist only for the duration of the user session. Logging out — or allowing the session to time out — removes the elevated privilege and returns the administrator to normal security levels. Comment [1], the most-endorsed comment, states this directly: "An elevated privilege role lasts only for the duration of your user session. Session timeout or logout removes the role." Comment [3] confirms the same answer, and 100% of community votes went to B.

Why the Other Options Are Wrong

Option A, Global Update Set, is used to capture configuration changes across update sets and has nothing to do with security elevation. Option C, End Impersonation, applies only when an admin is impersonating another user, which is a completely different feature from privilege elevation. Option D is wrong because there is no "Normal role" to select — elevation is not a role you toggle on and off in the role list. Option E references a "Normal Security" module that does not exist; the only elevation UI is the Elevate Role dialog. Comment [2] notes that in the Washington release you can reopen "Elevate Role" and deselect the checkbox, but that option is not offered here, so B remains the best available answer.

Community Comment Notes

Comment [1] (4 likes) gives the authoritative rationale: elevation is session-scoped and removed by logout or timeout. Comment [2] adds a useful modern alternative — deselecting the checkbox in the Elevate Role dialog — which reinforces that elevation is temporary even though that exact method is not among the options. Comments [3] and [4] reinforce the consensus, and the vote distribution is 100% for B, leaving no ambiguity.

Official Reference

These links open the official vendor documentation in a new tab.

Exam Strategy

Memorize that elevated privileges in ServiceNow are temporary and session-scoped: logout or session timeout removes them. When a question asks for 'a possible way' to return to normal security, pick the session-ending option. Do not confuse elevation with impersonation, which is a separate feature ended via 'End Impersonation.'

Community Votes

B
100%

100% of anonymous learners picked answer B. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 4 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 4

  1. 8d6fb83 👍 4 Answered B
    By default, you do not have elevated privilege roles upon login. You must manually elevate to the privilege of the role. An elevated privilege role lasts only for the duration of your user session. Session timeout or logout removes the role.
  2. connal308876 👍 2
    In Washington, you can select "Elevate Role" again, and deselect the checkbox. Then click the Update button.
  3. kanafuka225 👍 2 Answered B
    B: Login out and back in
  4. skepraxis 👍 1
    I agree with connal308876.

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Submitted for moderation before publishing. Keep it helpful and respectful.

Which ServiceNow ACL Rule Grants Full Table Access?

S-grade

Which three methods can ServiceNow use to notify users of events?

S-grade

Which Storefront Provides Pre-Built Spokes for Third-Party Integrations?

S-grade

Which ServiceNow Roles Are Required to Impersonate a User?

S-grade

Practice All CSA Questions

Access 368 questions with complete answers and detailed explanations.

View Full CSA Practice Test →

← Back to CSA Study Guide