The Principal Class filter is controlled by the principalclassfilter dictionary attribute on the Configuration Item field. Modifying dictionary attributes requires the personalizedictionary role. The sncmdbadmin role is a comprehensive administrative role for the CMDB. It contains the personalizedictionary role, granting it the necessary permissions to perform this and other CMDB structural configurations, such as managing CI classes and their attributes. Therefore, a user with either of these roles can modify the Principal Class filter.

C. The sncsdmadmin role focuses on CSDM data governance, managing lifecycles, and ensuring model adherence, not low-level dictionary or table configuration.

D. The cmdbquerybuilder role grants permissions to create, edit, and run queries against the CMDB but does not include administrative configuration privileges.

1. ServiceNow Product Documentation. (2023). Dictionary attributes. Describes how attributes like principalclassfilter are used and that modifying them requires dictionary personalization rights.

2. ServiceNow Product Documentation. (2023). CMDB roles. The documentation for the sncmdbadmin role explicitly states it contains roles like personalizedictionary, granting it broad configuration capabilities for the CMDB.