Configuring Applications for Collaboration
This domain covers ITSM applications including Incident, Problem, Change Management, and Knowledge Management. It tests your ability to configure task-based workflows and collaborate across teams.
The Task Table & Task-Based Applications
The Task table (task) is the parent table for all work-tracking applications in ServiceNow. Incident, Problem, Change, and many other tables extend Task and inherit its fields and behaviors.
Key Task Table Concepts
- Task [task] is the base table — never create records directly on it.
- Child tables inherit ALL fields from Task: Number, State, Priority, Assignment Group, Assigned To, Short Description, etc.
- State field controls the lifecycle of any task record.
- Assignment rules route tasks to the correct group/individual.
- SLAs can attach to any task-based record.
- Activity stream tracks all updates, comments, and work notes on task records.
Task Table Hierarchy
| Table | Extends | Purpose |
|---|---|---|
| incident | task | Record and resolve service disruptions |
| problem | task | Identify root causes of recurring incidents |
| change_request | task | Manage changes to the IT environment |
| sc_req_item | task | Service Catalog request items |
| kb_knowledge | — | Knowledge articles (NOT a task) |
Knowledge (kb_knowledge) does NOT extend the Task table. This is a common exam trap. Knowledge articles have their own lifecycle (Draft → Review → Published → Retired) but are not task records.
Incident Management
Incident Management restores normal service operation as quickly as possible while minimizing business impact. It is the most commonly used ITSM process.
Incident Lifecycle
- New — Incident is created (via portal, email, phone, or auto-generation).
- In Progress — Assigned and being worked on.
- On Hold — Waiting for external input or a third party.
- Resolved — Fix applied, awaiting confirmation from the caller.
- Closed — Confirmed resolved. No further action.
- Canceled — Incident was not valid or was a duplicate.
Key Incident Fields
- Caller — The person reporting the issue.
- Category / Subcategory — Classification of the issue type.
- Priority — Calculated from Impact × Urgency using a priority lookup matrix.
- Assignment Group / Assigned To — Who is responsible for resolution.
- Configuration Item (CI) — The affected service or asset.
- Short Description / Description — What happened.
- Resolution Code / Resolution Notes — How it was resolved.
Priority Matrix (Impact × Urgency)
| High Urgency | Medium Urgency | Low Urgency | |
|---|---|---|---|
| High Impact | 1 - Critical | 2 - High | 3 - Moderate |
| Medium Impact | 2 - High | 3 - Moderate | 4 - Low |
| Low Impact | 3 - Moderate | 4 - Low | 5 - Planning |
Priority is CALCULATED from Impact and Urgency — it is not set directly. The Priority Lookup Rules table (dl_matcher) defines the mapping. Know this matrix for the exam.
An email server is down affecting 500 employees who cannot send or receive email. How should this incident be classified?
Impact: High (large number of users affected). Urgency: High (email is a critical service). Priority: 1 - Critical. The incident should be assigned to the email/messaging team and may qualify as a Major Incident.
Problem Management
Problem Management identifies and manages the root causes of incidents. Problems may be created from incidents or proactively through trend analysis.
Problem Lifecycle
- New — Problem identified (from incident pattern or proactive investigation).
- Assess — Evaluate the scope and impact of the problem.
- Root Cause Analysis — Investigate to identify the underlying cause.
- Fix in Progress — Developing a permanent fix.
- Resolved / Closed — Root cause addressed; associated incidents can be resolved.
Key Concepts
- Known Error — A problem with a documented root cause and a workaround. Stored in the Known Error database.
- Workaround — A temporary fix that reduces incident impact until a permanent resolution is available.
- Related Incidents — Problems link to one or more incidents that share the same root cause.
- Problem Task — Sub-tasks created from a problem to track investigation activities.
A Known Error is NOT the same as an open Problem. A Known Error has a documented root cause AND a workaround. Problems without a known root cause are still in investigation. Know this distinction.
Change Management
Change Management controls the lifecycle of all changes to minimize disruption. ServiceNow supports three change types with different risk and approval requirements.
Change Types
Change Types Comparison
| Type | Risk | Approval | Example |
|---|---|---|---|
| Standard | Low/Pre-approved | Pre-authorized template | Password reset, printer setup |
| Normal | Medium/Variable | CAB review required | Server upgrade, firewall rule change |
| Emergency | High/Critical | Expedited (post-implementation review) | Critical security patch, outage fix |
Change Lifecycle (Normal Change)
- New — Change request created with description, risk, and plan.
- Assess — Review impact and assign to the correct team.
- Authorize — Submit for CAB approval.
- Scheduled — Approved and waiting for the implementation window.
- Implement — Execute the change during the scheduled window.
- Review — Post-implementation review. Was it successful?
- Closed — Change completed and documented.
- Change Advisory Board (CAB) — Reviews and approves normal changes.
- Conflict Detection — Checks for scheduling conflicts with other changes or blackout windows.
- Change Schedule — Calendar view showing all planned changes.
- Blackout Windows — Periods where changes are restricted (e.g., end-of-quarter freeze).
Standard Changes are pre-approved templates — they do NOT go through CAB. Normal Changes require CAB approval. Emergency Changes get expedited approval but STILL require post-implementation review.
Knowledge Management
Knowledge Management stores and shares information to help users resolve issues without contacting the service desk. Articles are organized in Knowledge Bases with a publish workflow.
Knowledge Article Lifecycle
- Draft — Author creates the article.
- Review — Submitted for peer/manager review and approval.
- Published — Available to end users (based on 'Can Read' user criteria).
- Retired — No longer relevant; hidden from search but preserved for reference.
Knowledge Base Configuration
- Knowledge Bases — Top-level containers (e.g., IT KB, HR KB).
- Categories — Organize articles within a knowledge base.
- User Criteria — 'Can Read' and 'Can Contribute' control who can view and author articles.
- Article Templates — Standardize article format and structure.
- Knowledge Blocks — Reusable content blocks that can be shared across multiple articles.
- Feedback — End users can rate articles and flag them for improvement.
User Criteria (not ACLs) controls who can read knowledge articles. The 'Can Read' user criteria on the Knowledge Base determines article visibility. User Criteria can be based on roles, groups, departments, companies, or scripts.
The HR team wants to publish policies that only HR employees can see. How should you configure this?
Create a separate Knowledge Base for HR. Set the 'Can Read' user criteria to include only users in the HR Department or HR groups. This restricts visibility without affecting other knowledge bases.
Notifications & Email
Notifications are automated emails triggered by record events. They are essential for keeping users informed about tasks, approvals, and status changes.
Notification Components
- When to send — Conditions that trigger the notification (record inserted, updated, or on a schedule).
- Who will receive — Recipients defined by field values (Assigned To, Caller), groups, roles, or email addresses.
- What it will contain — Email body with HTML template and variable substitution (${field_name}).
Inbound Email Actions
- Inbound emails can create or update records automatically.
- Match on subject line watermark (e.g., INC0012345) to update existing records.
- If no match, create a new record (typically an incident).
- Inbound Action configuration: Target table, conditions, and field mappings.
The email watermark (record number embedded in the subject) is how inbound emails are matched to existing records. If the watermark is missing or altered, a NEW record will be created instead of updating the existing one.
Key Takeaways
- The Task table is the parent of Incident, Problem, Change, and Catalog Items — but NOT Knowledge articles.
- Priority is CALCULATED from Impact × Urgency. It is not set directly by the user.
- A Known Error has a documented root cause AND workaround. It is different from an open Problem.
- Standard Changes are pre-approved (no CAB). Normal Changes require CAB. Emergency Changes get expedited approval.
- Knowledge articles use User Criteria (Can Read / Can Contribute) for access, NOT ACLs.
- Email watermarks in subject lines match inbound emails to existing records. Missing watermarks create new records.
- Notification configuration has three parts: When (trigger), Who (recipients), What (content).
Community-created study aids. Not official ServiceNow exam content.