Study Material/CSA/Collaboration
20% of Exam~12 questions

Configuring Applications for Collaboration

This domain covers ITSM applications including Incident, Problem, Change Management, and Knowledge Management. It tests your ability to configure task-based workflows and collaborate across teams.

The Task Table & Task-Based Applications

The Task table (task) is the parent table for all work-tracking applications in ServiceNow. Incident, Problem, Change, and many other tables extend Task and inherit its fields and behaviors.

Key Task Table Concepts

  • Task [task] is the base table — never create records directly on it.
  • Child tables inherit ALL fields from Task: Number, State, Priority, Assignment Group, Assigned To, Short Description, etc.
  • State field controls the lifecycle of any task record.
  • Assignment rules route tasks to the correct group/individual.
  • SLAs can attach to any task-based record.
  • Activity stream tracks all updates, comments, and work notes on task records.

Task Table Hierarchy

TableExtendsPurpose
incidenttaskRecord and resolve service disruptions
problemtaskIdentify root causes of recurring incidents
change_requesttaskManage changes to the IT environment
sc_req_itemtaskService Catalog request items
kb_knowledgeKnowledge articles (NOT a task)
🔴Key Concept

Knowledge (kb_knowledge) does NOT extend the Task table. This is a common exam trap. Knowledge articles have their own lifecycle (Draft → Review → Published → Retired) but are not task records.

Incident Management

Incident Management restores normal service operation as quickly as possible while minimizing business impact. It is the most commonly used ITSM process.

Incident Lifecycle

  1. New — Incident is created (via portal, email, phone, or auto-generation).
  2. In Progress — Assigned and being worked on.
  3. On Hold — Waiting for external input or a third party.
  4. Resolved — Fix applied, awaiting confirmation from the caller.
  5. Closed — Confirmed resolved. No further action.
  6. Canceled — Incident was not valid or was a duplicate.

Key Incident Fields

  • Caller — The person reporting the issue.
  • Category / Subcategory — Classification of the issue type.
  • Priority — Calculated from Impact × Urgency using a priority lookup matrix.
  • Assignment Group / Assigned To — Who is responsible for resolution.
  • Configuration Item (CI) — The affected service or asset.
  • Short Description / Description — What happened.
  • Resolution Code / Resolution Notes — How it was resolved.

Priority Matrix (Impact × Urgency)

High UrgencyMedium UrgencyLow Urgency
High Impact1 - Critical2 - High3 - Moderate
Medium Impact2 - High3 - Moderate4 - Low
Low Impact3 - Moderate4 - Low5 - Planning
📝Exam Tip

Priority is CALCULATED from Impact and Urgency — it is not set directly. The Priority Lookup Rules table (dl_matcher) defines the mapping. Know this matrix for the exam.

SCENARIO

An email server is down affecting 500 employees who cannot send or receive email. How should this incident be classified?

Answer

Impact: High (large number of users affected). Urgency: High (email is a critical service). Priority: 1 - Critical. The incident should be assigned to the email/messaging team and may qualify as a Major Incident.

Problem Management

Problem Management identifies and manages the root causes of incidents. Problems may be created from incidents or proactively through trend analysis.

Problem Lifecycle

  1. New — Problem identified (from incident pattern or proactive investigation).
  2. Assess — Evaluate the scope and impact of the problem.
  3. Root Cause Analysis — Investigate to identify the underlying cause.
  4. Fix in Progress — Developing a permanent fix.
  5. Resolved / Closed — Root cause addressed; associated incidents can be resolved.

Key Concepts

  • Known Error — A problem with a documented root cause and a workaround. Stored in the Known Error database.
  • Workaround — A temporary fix that reduces incident impact until a permanent resolution is available.
  • Related Incidents — Problems link to one or more incidents that share the same root cause.
  • Problem Task — Sub-tasks created from a problem to track investigation activities.
📝Exam Tip

A Known Error is NOT the same as an open Problem. A Known Error has a documented root cause AND a workaround. Problems without a known root cause are still in investigation. Know this distinction.

AD SPACE

Change Management

Change Management controls the lifecycle of all changes to minimize disruption. ServiceNow supports three change types with different risk and approval requirements.

Change Types

Change Types Comparison

TypeRiskApprovalExample
StandardLow/Pre-approvedPre-authorized templatePassword reset, printer setup
NormalMedium/VariableCAB review requiredServer upgrade, firewall rule change
EmergencyHigh/CriticalExpedited (post-implementation review)Critical security patch, outage fix

Change Lifecycle (Normal Change)

  1. New — Change request created with description, risk, and plan.
  2. Assess — Review impact and assign to the correct team.
  3. Authorize — Submit for CAB approval.
  4. Scheduled — Approved and waiting for the implementation window.
  5. Implement — Execute the change during the scheduled window.
  6. Review — Post-implementation review. Was it successful?
  7. Closed — Change completed and documented.
  • Change Advisory Board (CAB) — Reviews and approves normal changes.
  • Conflict Detection — Checks for scheduling conflicts with other changes or blackout windows.
  • Change Schedule — Calendar view showing all planned changes.
  • Blackout Windows — Periods where changes are restricted (e.g., end-of-quarter freeze).
📝Exam Tip

Standard Changes are pre-approved templates — they do NOT go through CAB. Normal Changes require CAB approval. Emergency Changes get expedited approval but STILL require post-implementation review.

Knowledge Management

Knowledge Management stores and shares information to help users resolve issues without contacting the service desk. Articles are organized in Knowledge Bases with a publish workflow.

Knowledge Article Lifecycle

  1. Draft — Author creates the article.
  2. Review — Submitted for peer/manager review and approval.
  3. Published — Available to end users (based on 'Can Read' user criteria).
  4. Retired — No longer relevant; hidden from search but preserved for reference.

Knowledge Base Configuration

  • Knowledge Bases — Top-level containers (e.g., IT KB, HR KB).
  • Categories — Organize articles within a knowledge base.
  • User Criteria — 'Can Read' and 'Can Contribute' control who can view and author articles.
  • Article Templates — Standardize article format and structure.
  • Knowledge Blocks — Reusable content blocks that can be shared across multiple articles.
  • Feedback — End users can rate articles and flag them for improvement.
📝Exam Tip

User Criteria (not ACLs) controls who can read knowledge articles. The 'Can Read' user criteria on the Knowledge Base determines article visibility. User Criteria can be based on roles, groups, departments, companies, or scripts.

SCENARIO

The HR team wants to publish policies that only HR employees can see. How should you configure this?

Answer

Create a separate Knowledge Base for HR. Set the 'Can Read' user criteria to include only users in the HR Department or HR groups. This restricts visibility without affecting other knowledge bases.

Notifications & Email

Notifications are automated emails triggered by record events. They are essential for keeping users informed about tasks, approvals, and status changes.

Notification Components

  • When to send — Conditions that trigger the notification (record inserted, updated, or on a schedule).
  • Who will receive — Recipients defined by field values (Assigned To, Caller), groups, roles, or email addresses.
  • What it will contain — Email body with HTML template and variable substitution (${field_name}).

Inbound Email Actions

  • Inbound emails can create or update records automatically.
  • Match on subject line watermark (e.g., INC0012345) to update existing records.
  • If no match, create a new record (typically an incident).
  • Inbound Action configuration: Target table, conditions, and field mappings.
📝Exam Tip

The email watermark (record number embedded in the subject) is how inbound emails are matched to existing records. If the watermark is missing or altered, a NEW record will be created instead of updating the existing one.

Key Takeaways

  • The Task table is the parent of Incident, Problem, Change, and Catalog Items — but NOT Knowledge articles.
  • Priority is CALCULATED from Impact × Urgency. It is not set directly by the user.
  • A Known Error has a documented root cause AND workaround. It is different from an open Problem.
  • Standard Changes are pre-approved (no CAB). Normal Changes require CAB. Emergency Changes get expedited approval.
  • Knowledge articles use User Criteria (Can Read / Can Contribute) for access, NOT ACLs.
  • Email watermarks in subject lines match inbound emails to existing records. Missing watermarks create new records.
  • Notification configuration has three parts: When (trigger), Who (recipients), What (content).
AD SPACE

Community-created study aids. Not official ServiceNow exam content.