SN System Properties Reference
Category · 514 properties

ServiceNow Security & Access Control properties

These properties control security and access-related behavior across ServiceNow, including ACL checks, session handling, bot detection, and restrictions on specific operations. Admins and developers can consult them when configuring access controls, investigating security behavior, or reviewing settings that affect application and platform interactions, such as com.glide.acl_check_all_filter_on_new and com.glide.bot_detection.enabled.

Most common namespaces: com.glide 68 glide (other) 66 glide.security 50 glide.ui 32 com.snc 27 Other namespaces 23

actionutils.insertM2M.secure This property configures ActionUtils.postInsert() to use GlideRecordSecure instead of GlideRecord, applying ACL checks when creating M2M records.
angular.jsonp.inclusion_list.enabled This property determines if the inclusion list for JSONP requests is active, allowing only requests defined in the specified URLs.
angular.jsonp.inclusion_list.urls This property defines a comma-separated list of URLs that are permitted for JSONP requests, impacting data access and security.
com.glide.acl_check_all_filter_on_new This property ensures that ACLs are evaluated for all fields during new record creation from the filtered list view, preventing unauthorized access to protected fields.
com.glide.amb.session.logout This property enables or disables automatic logout for user sessions based on inactivity, enhancing security by minimizing the risk of unattended sessions.
com.glide.bot_detection.enabled This property controls the global setting for bot detection, determining whether automated bot interactions are monitored and managed.
com.glide.cle.allow_ec_key_deletion This boolean property allows the deletion of encryption context keys once all associated data has been migrated, enhancing key management efficiency.
com.glide.codesigning.expanded.tracking.enabled When enabled, this property extends the validation length for the meta stack for certain ecc_queue topics, provided that code signing is also active.
com.glide.codesigning.expanded_tracking.length This property specifies the number of validation levels for code signing when code signing is active.
com.glide.codesigning.expanded_tracking.topic.list This property defines a comma-separated list of topics that are subject to increased meta stack tracking, contingent on code signing being enabled.
com.glide.codesigning.tracking.agent.validation.exclusion.list It specifies which ecc_queue agents are exempt from code signing validation, allowing for smoother operations in specific scenarios.
com.glide.codesigning.tracking.enabled This property activates the tracking of callers involved in code signing processes, providing visibility into code signing actions.
com.glide.codesigning.tracking.ui_actions.allowlist This property defines a list of UI Action sysIds that are allowed to notarize records in the ecc_queue, preventing unauthorized actions.
com.glide.codesigning.tracking.unsupported_script_tracking.enabled When enabled, this property prevents notarization of ecc_queue records from unsupported scripts if code signing is also enabled.
com.glide.codesigning.tracking.validation.fail_fast This property, when enabled, causes code signing verification to terminate upon the first encountered script validation failure, rather than continuing to check all scripts.
com.glide.communications.disable.deprecated.tls It forces outbound connections from the instance to utilize TLS 1.2 or higher, enhancing security for data transmission.
com.glide.communications.httpclient.disable_crl_check This property determines if CRL-based revocation checking is enabled for outbound TLS HTTP requests, defaulting to false, which allows for CRL checks.
com.glide.communications.httpclient.fail_on_non_pass_crl_status This property controls the termination of outbound HTTP requests based on the results of Certificate Revocation List checks, enhancing security during TLS connections.
com.glide.communications.httpclient.ocsp_allow_network_error This property controls the behavior of OCSP checks in the event of network errors, impacting the validation of certificate revocation.
com.glide.communications.httpclient.outbound_cert_policy.enabled This property activates the enforcement of outbound certificate policies, allowing specific SSL/TLS validation rules for defined domains.
com.glide.communications.httpclient.verify_revoked_certificate This property controls the verification of revoked certificates during secure communications, impacting the security of outbound connections.
com.glide.communications.trustmanager_trust_all This property, when set to true, allows the system to accept all SSL certificates, bypassing standard validation checks.
com.glide.core_ui_components.java_endpoints.acls_loaded This boolean property controls the loading of ACLs for Java endpoints, enhancing security during system upgrades.
com.glide.cs.collab.teams_inbound_validate_clientState This property enables or disables the validation of client state for incoming Microsoft Teams messages, impacting the integrity of communication.
com.glide.cs.display_record_based_on_agent_permission Enabling this property allows record cards to be displayed only if the agent has the necessary permissions, thereby controlling access based on agent visibility.
com.glide.cs.embed.csp_frame_ancestors This property defines the allowed sources for embedding chat interfaces by configuring the frame-ancestors directive in the Content-Security-Policy header.
com.glide.cs.fdih.password.retry_limit This property defines the limit on failed confirmation attempts before an error topic is triggered during FDIH secure input prompts.
com.glide.cs.guest_session_cookie_max_age This property defines the lifespan of the guest session cookie, influencing how long a guest user remains authenticated during their session.
com.glide.cs.nextwave.service.users.whitelist This property specifies a whitelist of user identifiers that are allowed to access certain services within the platform.
com.glide.cs.profanity.force_whole_word_match It configures the profanity filter to match only complete words, preventing partial matches from being flagged.
com.glide.cs.profanity.word_regex It specifies the regex pattern used to enforce whole-word profanity detection in agent chat, impacting how profanity is filtered based on user input.
com.glide.cs.sensitive.data.agent_error This property configures the message shown when sensitive data is sent by an agent, defaulting to 'Not sent due to sensitive data'.
com.glide.cs.sensitive.data.requester_message This property configures the message shown to requesters when their input contains sensitive data, helping to inform them about privacy protections.
com.glide.cs.suggest.authorization.enabled This property controls whether the suggest API can emit topic information based on user authorization, enhancing security measures.
com.glide.csp.self_script_src_svg This property is a boolean setting that, when enabled, restricts SVG files from loading external scripts, thereby improving application security.
com.glide.decision_table.gate_feature This property, when set to true, limits decision table access to users with the maint role, ensuring that only authorized personnel can modify or view these tables.
com.glide.encryption.active_attachment_efc_enforcement This property determines whether encryption enforcement is applied to active attachments within the system.
com.glide.encryption.cle_kmf.key_source This property allows the selection of either ServiceNow generated keys or customer-supplied keys for encryption, impacting how data is secured within the platform.
com.glide.encryption.context_key_update_allowed This property allows for the modification of encryption context, enhancing flexibility in encryption management.
com.glide.encryption.is_ec_encryption_allowed This boolean property determines whether encryption with an encryption context key is permitted within the system.
com.glide.event_handler.code_signing.tracking This property specifies the Event Handler that manages security settings for customers enabling code signing.
com.glide.field.encryption.state This property reflects the encryption status of the instance, with values indicating which encryption plugins are activated.
com.glide.hub.code_signing.full.validation.enabled This property controls the enforcement of strict signature validation for Flow Designer artifacts, ensuring that only verified flows are executed.
com.glide.hub.flow.restricted_caller_access.track_flows_as_source It enables or disables the tracking of flows as a source for restricted caller access, impacting how access requests are processed.
com.glide.identity.security.impersonation.event.enabled This property enables or disables the generation of impersonation events by the Identity Security API, impacting how impersonation activities are logged.
com.glide.ignore_filter_on_new.field_types This property determines which field types are exempt from ACL checks when creating records from a filtered list view, impacting security and access control.
com.glide.journal.strict_acl This property determines whether strict access controls are applied to journal entries, enhancing data security.
com.glide.kmf.ejbca.enabled This property activates EJBCA for managing digital certificates within the ServiceNow environment.
com.glide.kmf.global It activates the Key Management Framework, allowing for secure key management and encryption services across ServiceNow applications.
com.glide.kmf.modules.access_policies.calibration.allowed_extra_track_modules It defines a list of Crypto Modules permitted to alter their access policy settings within the ServiceNow Key Management Framework.
com.glide.one_extend.default_roles_for_skill_acl This property defines a comma-separated list of default roles added to skill ACLs when creating or updating generative AI skills, contingent on another related property being true.
com.glide.one_extend.include_default_roles_for_skill_acl This property controls the inclusion of default roles from another property during the insertion or updating of 'gen_ai_skill' ACLs using the global.GenAiSkillSecurityUtils API.
com.glide.one_extend.roles_to_access_genaiskillsecurityutils_api It defines a list of roles, excluding 'maint', 'admin', and 'security_admin', that are permitted to use the GenAiSkillSecurityUtils API.
com.glide.pad.core.model.enableRuntimePermission This property determines whether runtime permissions are enabled, affecting how user permissions are managed within the application.
com.glide.quickactions.dispatchaction_whitelist This property specifies which action types can be dispatched by quick actions, impacting how users interact with the system.
com.glide.role_management.provision.enabled This property determines if role management provisioning operations are allowed, impacting how roles are assigned and managed within the system.
com.glide.script.fencing.cross_scope_access.shared_table_support This property defines the level of access control for shared tables when scripts are executed across different application scopes.
com.glide.script.guest.sandbox.freeze.db.ready This property enables or disables the readiness of the database for guest sandbox operations, impacting how guest users interact with the system.
com.glide.security.acl.data_condition.run_in_acl_scope This boolean property specifies if data conditions should run in the scope of Access Control Lists (ACLs), impacting how data visibility is enforced.
com.glide.security.acl.record_operations_without_columns It defines a list of ACL Record type operations that do not allow column values, enforcing the use of table values only.
com.glide.security.check_unsanitized_html This property determines how HTML content in translated_html fields is sanitized globally, affecting the security of field assignments.
com.glide.security.protected_table.enabled This property enables or disables the protection of specific tables within the ServiceNow platform to enhance security measures.
com.glide.security.query_acl.enabled.sub_lists It ensures that query ACLs are applied to sublist queries, restricting access to data based on user permissions.
com.glide.security.referrerpolicy This property configures how much information is sent in the 'referrer' header based on the selected policy, affecting both internal and external requests.
com.glide.security.strict_read_roles This property configures the system to enforce strict read roles for data access, ensuring that only users with the appropriate roles can view specific records.
com.glide.sm.password2.conflicting_packages It identifies packages linked to Secret Groups that do not correctly reference the Password2 submodule, impacting Secrets Management operations.
com.glide.sys.app_authorization It enforces user authorization by allowing only designated users to access the system and communicate via email.
com.glide.sys.security.delegateddev.block_grant_roles This property restricts delegated developers from modifying user roles in the sys_user_has_role table unless they possess the user_admin role, thereby enforcing stricter access controls.
com.glide.sys.user_hash_salt This property configures the salt used in the hashing process for user passwords, enhancing security against attacks.
com.glide.ui.content.js_content_access_decider.source This property determines the source used for evaluating access to JavaScript content within the ServiceNow environment.
com.glide.ui.ng.guided_flow.whitelisted_properties It specifies which properties can be queried via the '/now/ui/guided-flow/bootstrap' REST service, restricting access to only those listed.
com.snc.app_templates.enable_role_based_authoring It controls access permissions for editing, creating, or deleting records in specific tables based on user roles.
com.snc.assessment.signature_authentication This property enforces user authentication for signature actions, preventing unauthorized signatures.
com.snc.csf.cache.certificate This property enables or disables the caching of certificates during signature validation, enhancing performance in the ServiceNow Key Management Framework.
com.snc.csf.servicenow_root_of_trust.disabled When enabled, this property prevents the use of trusted Code Signing signatures, impacting the validation of signed code and potentially compromising security.
com.snc.csf.signature_scan_complete_poll_interval This property defines the time interval in minutes for the system to poll the Signature Event Completion table for completed signature scan events.
com.snc.document.conversion.allowlisting.enabled This property controls whether only listed URLs can be used for PDF conversions, enhancing security by restricting access to approved sources.
com.snc.documents.permalink.allowed_classifications This property defines a comma-separated list of document classifications that are allowed for public permalink sharing, impacting document accessibility for unauthenticated users.
com.snc.hermes.ipacl.enabled This property enables or disables IP address access control lists to manage network access restrictions.
com.snc.inactivity.monitor.use.schedule This property enables or disables the scheduled operation of the inactivity monitor, impacting session management and security.
com.snc.kmf.signature.use.jit_loading This property configures the verification process to load signature records only when needed, optimizing performance.
com.snc.kmf.signature.validation.certificate_trust This property maintains a trust map of certificate hashes essential for validating codesigning operations within the ServiceNow Key Management Framework.
com.snc.kmf.signature.validation.flag This property toggles the state of signature validation, impacting how signatures are verified within the system.
com.snc.kmf.signature.validation.optin This property controls the activation of Code Signing, preventing the execution of related jobs until it is enabled.
com.snc.kmf.signature.validity_window This property defines the validity period for signatures, with a configurable range from 5 to 15 minutes, ensuring secure operations within specified time limits.
com.snc.kmf.signature.validity_window_maximum This property defines the upper limit for the validity window of code signing signatures, ensuring they remain within a specified time frame.
com.snc.notify.conference_leader_restricted_access It enables or disables restrictions on conference leader access based on the customer type, affecting how leaders can manage conferences.
com.snc.on_call_rotation.calendar_read_roles This property defines a comma-separated list of roles that can access the on-call calendar, impacting visibility for on-call scheduling.
com.snc.pdfsigning.validation.method This property determines the method used to validate the identity of users signing PDFs, allowing for customization based on organizational requirements.
com.snc.platform.security.oauth.access_control.enabled This property determines whether access control features, specifically RBAC scope evaluations and management APIs, are enabled or disabled in the system.
com.snc.platform.security.token.auth.cleanup This property configures whether expired tokens are automatically cleaned up, helping to mitigate security risks associated with token reuse.
com.snc.platform.security.token.auth.days.expired.api_key This property configures the expiration duration for API keys, limiting their validity after expiration to enhance security.
com.snc.process_flow.reporting.require_flow_access It requires users to have access to the flow record to see the associated context, enhancing security by restricting visibility.
com.snc.resource_management.calendar_show_soft_allocations It configures the visibility of soft allocations in the calendar, allowing either resource managers or all users with the appropriate role to see them.
com.snc.resource_management.filter_table This property defines the table from which user group memberships are filtered in resource management processes.
com.snc.sdlc.scrum.pp.smclass This property specifies the class responsible for managing security in Scrum processes, impacting how user permissions are enforced.
com.snc.use_external_credentials This property allows the ServiceNow instance to utilize external credential storage, replacing sensitive data with identifiers to improve security during discovery and orchestration tasks.
com.snc.user_registration_auto_process This property controls whether user registration requests are processed automatically, resulting in the creation of user accounts without manual intervention.
com_snc_kmf_signature.validation.certificate This property ensures that only valid certificates are accepted during the code signing process, enhancing security by preventing the use of untrusted certificates.
connect.roles This property specifies which roles can use the Connect feature, enhancing security by restricting access to designated users.
csm_cmdb_model.customer_visible_flag This property enables the use of the Customer Visible field to control access to product model data on the Customer Service Portal and Business and Consumer Portal.
evt_mgmt.connector_assignment_group_admin_roles This property defines a comma-separated list of roles that are granted admin access to the assignment group field in connector instances, impacting who can manage event integrations.
evt_mgmt.connector_enable_custom_domain_separation It allows event management connectors to personalize domain separation, enabling event creation across multiple domains.
evt_mgmt.domain_self_monitoring This property sets the domain for self-health monitoring in Event Management, enabling the system to track and manage events and alerts specific to that domain.
glide.active.session.timeout.exception.roles It configures a comma-separated list of roles that are not subject to active session timeout limits, enhancing session persistence for specified roles.
glide.active.session.timeout.invalidate.session This property controls whether timed-out integration sessions are invalidated immediately, reducing the risk of unauthorized access during the timeout period.
glide.ais.security.admin_scope_field_acl_exclude_tables This property defines tables that are exempt from scope-based field access controls, allowing unrestricted access to specified fields.
glide.ais.security.disable_field_restriction This property, when set to true, allows users to bypass field-level security restrictions, enabling unrestricted access to all fields.
glide.ais.security.filter_condition_script_allow_list This property defines a comma-separated list of scripts exempt from current/reference checks in the AIS system, impacting how security is enforced.
glide.analytics.queryservice.accessible.scope.names This property configures a list of comma-separated scope names that are permitted to access the Query Service, impacting data retrieval and analytics capabilities.
glide.analytics.tracking.restricted.portals This property configures which portals have restricted analytics tracking based on provided sys IDs, impacting data visibility and reporting.
glide.approvals.restrict_by_record This property restricts approval record visibility based on the user's permissions for the related records.
glide.approvals.restrict_delete This property restricts deletion of approvals by non-admin users, ensuring that only authorized personnel can remove approval records.
glide.arp.allowed.subprocessors This property specifies a default set of subprocessors that ARP can utilize, impacting how data is processed and retrieved.
glide.arp.csp.allowed.url.schemes This property specifies a comma-separated list of URL schemes that are allowed for CSP network calls in ARP validation, impacting how external resources are accessed.
glide.arp.enforcement.enabled This property enables or disables Application Runtime Policy enforcement, allowing for flexibility during system incidents.
glide.arp.server.outbound.allowed.url.schemes This property specifies a comma-separated list of URL schemes that can be used for outbound network calls in ARP validation, impacting security and connectivity.
glide.authenticate.global.blocking_policy.error_code This property configures the specific HTTP error code, defaulting to 403, that users encounter when blocked by the Global Blocking Policy.
glide.authenticate.global.blocking_policy.error_message This property specifies the error message displayed to users when access is blocked due to the Global Blocking Policy, particularly when a Forbidden (403) HTTP error code is triggered.
glide.authenticate.session_access.action_preference This property sets the preference for removing or limiting roles when conflicts arise, influencing user access rights based on the defined behavior.
glide.authenticate.session_access.audit.delete.time.in_days It configures the retention period for session access audit data, determining how long this data is kept before deletion.
glide.authenticate.session_access.enabled This property activates zero trust session access, which restricts user sessions based on specific security criteria.
glide.authenticate.session_access.log_audit_event When set to true, this property logs session access events, including user identity, session ID, IP address, roles, and policies, aiding in security monitoring.
glide.authenticate.session_access.user_info_message It specifies the notification message shown to users when some of their session privileges have been removed due to security policies.
glide.basicauth.required.csv This property enforces basic authentication for CSV file requests, enhancing data protection.
glide.basicauth.required.evtmgmthttpprocessor This property enforces basic authentication for inbound SNS requests, enhancing security by preventing unauthenticated access.
glide.basicauth.required.excel This property enforces basic authentication for requests made to access Excel files, enhancing security for data management.
glide.basicauth.required.pdf This property enforces basic authentication for PDF file requests, ensuring that only authorized users can access these files.
glide.basicauth.required.rss This property enforces basic authentication for RSS requests, enhancing security by restricting access to authorized users only.
glide.basicauth.required.schema It enforces basic authentication for SCHEMA requests, preventing unauthorized access to critical data.
glide.basicauth.required.scriptedprocessor It enforces authentication for incoming script requests, requiring users to be authorized before executing any scripts.
glide.basicauth.required.unl It enforces basic authentication for unload requests, requiring users to provide valid credentials before proceeding.
glide.basicauth.required.xml This property enforces basic authentication for XML requests, enhancing security by requiring valid credentials for access.
glide.basicauth.required.xmloutputprocessor This property enforces basic authentication for XML export requests, preventing unauthorized access to sensitive data.
glide.cache.size.ACL_FAMILY_CACHE This property configures the size limit for the ACL family cache, impacting how access control lists are stored and retrieved.
glide.cache.size.ACL_FAMILY_CACHE.backup.@@snc_write_audit@@ This property specifies the backup size for the ACL family cache, influencing how access control lists are cached and managed.
glide.cache.size.zz_acl_cache_yy This property configures the maximum size of the ACL cache, influencing how access control lists are stored and retrieved.
glide.cache.size.zz_acl_cache_yy.backup.@@snc_write_audit@@ This property configures the backup size for the ACL cache, impacting how access control lists are stored and retrieved.
glide.change_current_app.whitelist This property defines a comma-separated list of domains permitted for redirection by the change_current_app Processor, impacting application behavior.
glide.collab.check_candidate_permission This property enables or disables the permission check for collaboration records during candidate list creation in chat features.
glide.cookies.http_only This property determines whether HTTP only cookies are generated, which restricts access to cookies from client-side scripts.
glide.cookies.secure This property configures the application to use secure cookies, preventing them from being transmitted over non-secure connections.
glide.crypto.core.config.cache This property configures the caching behavior for cryptography components, indicating their routing through either the unified backend or legacy transport.
glide.crypto.core.kmf.auto.key.exchange.hostname.denylist This property defines a list of hostnames that are denied from participating in automatic key exchange, preventing unauthorized instances from being recognized.
glide.crypto.core.startup.storage.encryption.keys.crash.on.registration.fail This property configures the system's behavior regarding crashing on failure to register encryption keys during startup.
glide.custom.ip.authenticate.allow This property allows administrators to specify a comma-separated list of IP addresses that can access the stats.do, threads.do, and replication.do pages, enhancing instance security.
glide.custom.ip.outbound.authenticate.allow This property appends specified IP ranges to the outbound IP allow list, controlling which external services the instance can connect to.
glide.db.allow_unsafe_dbi_execute_sql This property controls whether raw SQL queries can be executed, which can expose sensitive data if not properly restricted.
glide.db.audit.enable_audit_inserts This property configures the system to log record insertions in the sys_audit table for designated tables.
glide.db.encoded_query.check_function_field_query_acls This property controls the validation of query ACLs on Glide DB functions, impacting access to data based on defined security rules.
glide.db.encoded_query.enforce_field_acl This property controls the enforcement of field ACLs on encoded queries, impacting user access to sensitive data based on their permissions.
glide.db.encoded_query.force_query_range_on_functions This property allows administrators to define specific Glide DB functions that will have query ACLs validated, enhancing security by controlling access to data.
glide.db.passthrough.func.allowlist_default It defines a default set of SQL functions that can be executed in passthrough mode, impacting database interactions.
glide.db.separation.field This property controls whether the company separation feature is active, allowing for proper management of domain separation settings.
glide.device.token.revoked.delete.time.in_days This property configures the retention period for revoked device tokens in the device registration table, with a default setting of 15 days.
glide.device.trust.block.browser.access.for.urls This property prevents browser access to designated URLs by removing the device trust token associated with those URLs.
glide.email.inbound.triggers.skip_read_access_check This property configures a list of tables for which read access checks are skipped in Inbound Email triggers, facilitating smoother email processing.
glide.embedded.session.trust.verification.enabled This property enforces JWT verification for guest embedded sessions, preventing unauthorized access from untrusted sources.
glide.enable.blacklist_password This property ensures that user passwords are checked against a predefined blacklist of excluded passwords to improve security.
glide.enable.password_policy This property activates the password policy feature, which governs password complexity and expiration requirements for users.
glide.enforce_security_scope.sn_em This boolean property determines whether security scopes are enforced for the Evidence Management application, enhancing data security by limiting access.
glide.enforce_security_scope.sn_gsm This property controls access to application data, allowing or restricting access based on defined access control lists depending on its boolean value.
glide.enforce_security_scope.sn_gsm_info_req This property determines whether access control lists from all scopes are considered when granting access to playbook data in the scope master table.
glide.enforce_security_scope.sn_gsm_lic_prmt This property restricts access to License and Permit Playbooks data by enforcing the use of specific ACLs from the sn_gsm_lic_prmt scope.
glide.enforce_security_scope.sn_svc_appl_info This property ensures that access to resources in the Service Application Information scope is governed solely by its specific access control lists, preventing broader access from other scopes.
glide.enforce_security_scope.sn_uni_req This boolean property enforces security scope restrictions for the Universal Request application, ensuring that only authorized users can access specific functionalities.
glide.enforce_security_scope.sn_uni_task This boolean property enforces security scope checks for the Universal Task application, ensuring that only authorized users can access specific functionalities.
glide.glide_encrypter.custom_key.usage This property determines the usage of the Glide Encrypter Custom Key API within the instance, affecting how encryption is handled.
glide.guest.active.session.life_span This property enforces a maximum lifespan for active guest sessions, overriding the inactive timeout setting.
glide.guest.session_timeout This property defines the timeout period for guest sessions, defaulting to 30 minutes, which affects how long guests can remain logged in before being automatically logged out.
glide.history.role This property defines a comma-separated list of roles that are permitted to access record history, impacting data visibility and security.
glide.html.css.enable_url_validation This property validates URLs in <link>, url(), and @import rules against a whitelist when enabled.
glide.html.css.url_allowed_hosts This property configures an allow list for domains used in external CSS links, controlling which sources can be referenced.
glide.html.escape_script This property ensures that JavaScript tags are escaped in HTML fields, enhancing security by preventing script execution.
glide.html.sanitize_all_fields This property enables or disables the global sanitization of HTML fields, affecting how HTML content is processed throughout the system.
glide.http.headers_config.enabled This property determines whether HTTP response header configurations are utilized, impacting security measures against various web vulnerabilities.
glide.hub.process.engine.secure.store.delete.data.limit This property defines the threshold for the number of entries that can be deleted from the secure store in a single operation.
glide.ide.runtime.allowed_scopes This property defines the specific scopes that are allowed to invoke sn_glider APIs, impacting API access control.
glide.identity.aclanalyzer.is_new_ui This property specifies whether the new access analyzer UI is enabled, affecting how users interact with the Access Analyzer application.
glide.identity.aclanalyzer.retrieve_acl_customization_info This boolean property controls whether evaluations for ACL customizations are enabled, affecting how access permissions are determined.
glide.identity.security.audit.enabled This property controls the activation of security audits, allowing for monitoring of security events and actions taken within the system.
glide.identity.security.audit.visitor.enabled This property controls whether security audits are performed for users identified as visitors, impacting how visitor activities are logged and monitored.
glide.image_provider.security_enabled This property enables or disables security checks for the ImageContentProvider, affecting how iix content is rendered within the platform.
glide.ip.authenticate.allow This property defines a list of IP addresses that can connect to the instance, particularly when strict IP authentication is enabled.
glide.ip.authenticate.allow.secured This property defines a list of trusted IP addresses that are allowed to make inbound connections when strict IP authentication is enabled.
glide.ip.authenticate.allow.secured.self_hosted_enabled This property enforces strict IP authentication by using a secure IP allow list for self-hosted instances, overriding the default inbound IP settings.
glide.ip.authenticate.allow.secured.self_hosted_list This property defines a comma-separated list of IP addresses that are permitted for inbound and outbound connections to a self-hosted ServiceNow instance, overriding default settings.
glide.ip.authenticate.allow.self_hosted_enabled This property enables self-hosted instances to replace the default inbound IP allow list with a custom list of trusted IP addresses.
glide.ip.authenticate.allow.self_hosted_list This property defines a comma-separated list of trusted IP addresses for self-hosted instances, which replaces the default IP allow list when the instance is self-hosted.
glide.ip.authenticate.strict When enabled, this property ensures that only specified essential IP addresses can connect to the instance, replacing broader default IP allow lists.
glide.jdbcprobeloader.tracking This property enables or disables Code Signing for JDBC Data Sources, impacting how data integrity is verified in the system.
glide.kmf.adhoc_key_exchange.number_of_retries This property sets the maximum number of retry attempts for a failed AdHoc Key Exchange, defaulting to five attempts.
glide.kmf.adhoc_key_exchange.retry_delay This property configures the retry delay for AdHoc Key Exchange, increasing exponentially with each failed attempt.
glide.kmf.customer_level_encrypter.enabled This property enables the customer_level_glide_encrypter module, allowing for enhanced encryption methods in GlideEncrypter and Password2 functionalities.
glide.kmf.encrypter.enabled This property determines whether the encryption functionality is active, impacting how data is secured across the system.
glide.kmf.encrypter.subModule.autoGen.enabled This property determines whether the system automatically generates encryption submodules, impacting data security configurations.
glide.kmf.ephemeral_key.key_padding This property specifies the padding scheme for ephemeral key pairs, impacting the security and performance of cryptographic operations.
glide.kmf.ephemeral_key.key_size This property defines the size of the ephemeral key pair, impacting the strength of encryption within the ServiceNow Key Management Framework.
glide.kmf.ephemeral_key.key_validity_period This property sets the validity period for ephemeral key pairs, influencing how long they can be used before automatic deletion occurs.
glide.kmf.instance_level_encrypter.enabled This property activates instance-level encryption, enhancing the security of sensitive information stored within the ServiceNow platform.
glide.kmf.module_access_policies.debugger.authorized.roles This property allows the KMF admin to define a list of roles that are permitted to view the Module Access Policies Debugger logs, enhancing security and access control.
glide.kmf.onetime_key_exchange.number_of_retries This property defines how many times the system will retry a One-time Key Exchange if the initial attempt fails, with a default of five retries.
glide.kmf.onetime_key_exchange.retry_delay This property defines the initial delay duration between retry requests for One-time Key Exchange, which increases exponentially with each subsequent failure.
glide.kmf.recurring_key_exchange.number_of_retries This property defines how many times the system will retry a Recurring Key Exchange operation if it initially fails.
glide.kmf.recurring_key_exchange.retry_delay This property defines the initial delay between retry attempts for the Recurring Key Exchange, which increases exponentially with each failure.
glide.kmf.resource.exchange.enabled.modules This property configures the crypto modules that can participate in automatic key exchange, specifically excluding certain submodules.
glide.license.enforcement.log This property controls whether logs are generated for users who are denied access to ServiceNow applications.
glide.live_feed.custom_journal.acl_check_enabled This property enforces ACL checks on custom journal fields within the Live Feed feature, controlling visibility based on user permissions.
glide.live_profile.details This property configures the visibility of detail fields in a Live Profile based on access control settings, allowing for flexible data exposure management.
glide.mra.related_list.getFilterQuery.whitelist_extension_points_for_mandatory_field_check It specifies which extension points are exempt from the ACL check during mandatory field validation in the MRA filter API.
glide.oauth.block_websvc_session_for_ui This property, when set to true, blocks web service sessions from being used in the user interface, thereby restricting access and improving security.
glide.one_extend.genai.log.access_handler This property determines whether the access handler is active for the sys_generative_ai_log table, affecting how access to log entries is managed.
glide.one_extend.genai.restricted_table.access_handler This property determines whether the access handler is active for restricted tables, affecting how data access is managed.
glide.one_extend.mosaic.sync.disable_data_separation_enforcement This property controls the enforcement of domain-visibility filtering for data-separated instances, impacting user access to records based on their domain permissions.
glide.outbound.3des.ciphersuite.disabled This property controls the enabling or disabling of 3DES cipher suites for outbound communications, impacting data security during transmission.
glide.outbound.sslv3.disabled This property disables SSLv3 for outbound connections, ensuring that only TLS is used for secure communications.
glide.password.policy.generate.password.field.disabled This property controls whether the password field is displayed in the password reset interface for user accounts.
glide.password2.honor.attributes This property prevents the system from honoring specific password attributes, ensuring consistent password handling.
glide.password2.legacycode.disabled This property disables the legacy password handling code to enhance security and compliance with best practices.
glide.password_policy.debug This property activates detailed debug logging for the Password Policy, allowing for better visibility into password management processes.
glide.password_policy.use_excluded_special_char It allows administrators to configure password policies by excluding certain special characters from being used in passwords.
glide.processor.ws.trustedusers This property defines which users can be impersonated during SOAP actions, allowing for controlled access to system resources.
glide.properties.maint_write_roles This property specifies which roles are permitted to modify maintenance properties within the ServiceNow platform.
glide.query.sandbox.enforce_authenticated_check This boolean property determines whether authentication checks are enforced in the query sandbox, enhancing data security.
glide.read_only.legacy_read_only_behavior This property configures how read-only fields behave when their dictionary setting is set to 'Instance Configured', allowing for testing of different read-only options.
glide.record.enforce_password_policy_all This property determines whether the password policy is applied universally to all records, enhancing security compliance.
glide.record.legacy_cross_scope_access_policy_in_script This boolean property enables or disables the use of legacy cross-scope access policies in ServiceNow scripts, affecting how scripts can access records across different application scopes.
glide.record_watcher.dynamic.whitelist This property specifies a comma-separated list of allowed predicates for dynamic responder conditions, controlling which conditions can be accepted.
glide.report.report_view.read_acl This property configures access control for executing reports, enhancing security by restricting visibility based on user permissions.
glide.rest.attachment_api.enforce_authentication This property enforces authentication for the attachment API, preventing unauthorized access to attachments.
glide.rest.java.honor_snc_internal_flag This property configures the default access control for Java implemented REST API resources based on the 'snc_internal' role, impacting security and accessibility.
glide.rest.policy.normalize_apply_all_fields It normalizes the generation of lookup keys for REST API access policies by discarding specific values when wildcard flags are set, ensuring policies match their declared scope.
glide.rest.sanitize_request_input This property configures the system to sanitize script elements in request data, enhancing security by mitigating risks associated with malicious input.
glide.rest.service.stats.row.level.acl.enabled This property determines whether row-level access control is enforced for REST service statistics, impacting data visibility based on user permissions.
glide.restricted_caller_access.requested_rca_feature.enable This property activates the requested RCA feature, impacting how restricted callers access certain functionalities within the system.
glide.role_management.upgrade_batched_processing This property controls whether batched inherited roles processing is applied to sys_user_role_contains records during platform upgrades and plugin installations.
glide.role_management.upgrade_user_batch_count This property determines the batch size for user processing during role upgrades when batched processing is enabled.
glide.role_management.use.inh_count This property enables or disables the use of inheritance count in role management, affecting how roles are evaluated in relation to their parent roles.
glide.role_management.use_role_contain_counts_optimization It reduces the number of database queries required when assigning roles to users by caching role-contain counts, enhancing system efficiency.
glide.role_management.v2.audit_roles This property allows the system to log changes to user roles in the Audit Roles table, ensuring compliance and tracking of role assignments.
glide.rollback.expiration_days_redact This property determines how long backups of source PII are kept after anonymization, with a default retention period of three days.
glide.sandbox.check_acl.table_exists This boolean property, when set to true, enables checks for table existence in the sandbox, impacting access control list (ACL) evaluations.
glide.sandbox.fields.check_acl This property ensures that field-level ACLs are checked in the GlideRecordSandbox, preventing applications from accessing data outside their designated scope.
glide.sandbox.usersession.allow_unsanitized_messages This property allows or restricts sandboxed user sessions from sending unsanitized messages, logging a warning when enabled.
glide.sc.use_user_criteria This property determines whether User Criteria is utilized for defining access permissions to catalog items and categories in ServiceNow.
glide.script.ccsi.ispublic This property restricts client-callable script includes from being executed by non-logged-in users, thereby protecting sensitive business logic and data.
glide.script.dot_walk.add_attribute_on_table_create This property adds an attribute to new tables that enforces cross-scope access checks when dot-walking using reference fields, enhancing data security.
glide.script.dot_walk.enforce_cross_scope_access_all_tables This property determines whether authorization checks are enforced for all cross-scope table data accesses through dot-walking, unless overridden by specific table settings.
glide.script.dot_walk.log_and_allow_violations This property enables logging of access violations when dot-walk is used to access tables across application scopes without enforcing access controls.
glide.script.scoped_glide_record.enforce_acls_sandbox This property determines whether ACLs are enforced for ScopedGlideRecord operations in a scoped sandbox, with options to log warnings or skip checks entirely.
glide.script.secure.ajaxgliderecord This property enforces security access controls on AJAXGlideRecord calls, ensuring that only authorized users can execute these operations.
glide.script.ui_page.customer_scoped.security_msgs_enabled This property controls the display of security recommendations for customer-scoped UI pages, particularly when an ACL is missing or insecure APIs are used.
glide.se.used.inst_inst_09f19dd0dbb6f11039639027c5961966_sek This property tracks the usage status of the SEK for re-keying, helping to manage encryption keys effectively.
glide.se.used.inst_inst_27cb2d0cfbfcee901feef633beefdc17_sek This property specifies if the SEK is still utilized for re-keying, impacting security operations within the instance.
glide.se.used.inst_inst_e6d136fd1bf1f1d09377eb9b2d4bcbf1_sek This property determines if the specified SEK is actively used for re-keying, impacting encryption processes.
glide.security.3des.encryption.allow This property allows the use of 3DES encryption for deprecated APIs, impacting how data is encrypted and decrypted within the system.
glide.security.3des.key_retention_duration This property sets the retention duration for keys managed by the 3DES key removal job, influencing when keys are deleted from the system.
glide.security.3des.removal_job_status This property reports the progress of the scheduled job that deactivates old 3DES static keys, ensuring safe migration away from deprecated encryption methods.
glide.security.3des.static_keys_usable This property enables or disables the use of static 3DES keys for encryption within the ServiceNow platform.
glide.security.3des.suspension_date This property records the timestamp for when the 3DES key removal job was paused, impacting key management processes.
glide.security.acl_with_invalid_roles_strict_deny This property enforces strict denial of access for ACLs that reference only deleted or non-existent roles, preventing unauthorized access based on misconfigured role references.
glide.security.admin.override.accessterm This property, when set to true, ensures that the admin overridable condition is assessed specifically at the access term level, impacting how access permissions are enforced.
glide.security.allow_unauth_roleless_acl This property controls access for unauthenticated users to resources governed by roleless scripted Access Control Lists, impacting system security.
glide.security.csrf.httpauth_processor_allowlist This property allows specified processors to bypass CSRF enforcement when the broader CSRF checks for authenticated requests are enabled, preventing HTTP 401 rejections for those processors.
glide.security.csrf.processor.all.authenticated.enabled This property enforces CSRF token validation for authenticated requests, rejecting those without valid tokens to protect against CSRF attacks.
glide.security.csrf.strict.validation.mode This property determines whether strict validation of CSRF tokens is enforced, blocking requests with mismatched tokens.
glide.security.csrf_previous.allow This property allows expired secure tokens to be used for request validation, impacting CSRF protection mechanisms.
glide.security.csrf_previous.time_limit This property defines the duration a secure token remains valid, expiring when the user session ends unless specific conditions are met.
glide.security.diag_txns_acl This property allows only admin users or users from specified IP addresses to access the stats.do, threads.do, and replication.do endpoints.
glide.security.disable_ui_pages_sysparm_client_script This property prevents the evaluation of client scripts included in URL parameters for UI pages, enhancing security by avoiding potential script injection.
glide.security.empty_acl.popup_window.enabled This property enables a popup window alerting users when an empty ACL is encountered, enhancing security awareness.
glide.security.empty_acl_bounce This property triggers a fix for empty ACLs by adding a script to their configuration, ensuring they are properly secured during key system events.
glide.security.enable.deny_empty_or_invalid_acl_validation This property enforces validation checks on ACLs, ensuring they are properly configured and not left empty or invalid.
glide.security.enable_archive_table_acls This property enables or disables the enforcement of active 'read' ACLs on archive tables, defaulting to true for security purposes.
glide.security.exclusive_explicit_roles This property prevents role collisions by aborting actions that would cause conflicts between the snc_external and snc_internal roles.
glide.security.expander.view.legacy This property controls the evaluation method of View ACLs, allowing for either legacy or updated behavior that aligns with table ACLs.
glide.security.explicit_roles.do_not_fix_in_memory This property specifies whether the snc_internal role should be included in memory and the sys_user_has_role table, impacting user role assignments.
glide.security.explicit_roles.enable_internal_user_blacklist This property enforces a blacklist for internal user roles, preventing external users from being assigned the snc_internal role when set to true.
glide.security.explicit_roles.fix_in_memory This property, when set to true, ensures that explicit roles are retained in memory, preventing potential inconsistencies during user interactions.
glide.security.explicit_roles.ignore.snc_internal.exclude_role_list This property allows administrators to define a list of roles that will not receive the snc_internal role, impacting user access control.
glide.security.explicit_roles.internal_user_blacklist It prevents specific user classes from being assigned the snc_internal role, ensuring they receive the snc_external role when the Explicit Roles plugin is active.
glide.security.get_roled_users.limit This property defines the upper limit on the number of user-role entries that can be queried, with a default of 10 million and an option for no limit when set to -1.
glide.security.glideencrypter.allow This property allows or restricts the usage of the Glide Encrypter API based on its boolean value.
glide.security.granular.create This property determines whether create rules are enforced for new records, as opposed to general write permissions.
glide.security.groupby_acl_check This property determines whether ACL checks are enforced for group names during GroupBy operations, enhancing security by validating access against real group data.
glide.security.inh_count_patcher.enabled It activates the patcher role recalculation process to fix discrepancies in user role assignments caused by concurrent updates.
glide.security.manager This property determines the security manager implementation, affecting how security contexts are managed in ServiceNow.
glide.security.restrict.get.login This property determines whether GET login requests are restricted, enhancing security by limiting potential attack vectors.
glide.security.restrict.get.portal.login This boolean property determines whether access to portal login is restricted, enhancing security by limiting login attempts.
glide.security.sandbox_no_logging This property controls the availability of log(), logError(), and logWarning() methods in the sandbox, enhancing security by limiting logging capabilities.
glide.security.scoped_administration This property restricts admin access to scoped applications, enhancing security by limiting visibility to only authorized users.
glide.security.scoped_administration.honor_global_acl This property enables or disables the honoring of Global ACLs for specific tables defined in sys_scoped_admin_acl_table, affecting access management.
glide.security.script.include.name.case.insensitive.list This property configures a list of script includes for case-insensitive matching in authentication processes, ensuring consistent behavior across different requests.
glide.security.scripting_governance.enabled This property restricts script authorship to authorized users, ensuring that only those with the script-writer role can create or modify executable script content across the platform.
glide.security.scripting_role.auto_provisioning This property determines whether a scheduled job runs to automatically update group memberships for the Conditional Script Writer group based on user eligibility.
glide.security.scripting_role.provisioning_job_running This boolean property tracks the status of the initial provisioning job for Scripting Governance, affecting user group memberships.
glide.security.strict.actions It requires conditions for UI actions to be validated before execution, rather than just during form rendering, improving security measures.
glide.security.strict.updates It enforces strict security validation for inbound transactions during form submissions, ensuring that user permissions are verified.
glide.security.strict.user_image_upload This property enforces table ACLs on image uploads to the Photo field, restricting uploads to authorized users only.
glide.security.strict_elevate_privilege This property enforces strict privilege elevation requirements for 'admin' role users, enhancing security by controlling access.
glide.security.url.whitelist This property restricts external URL redirection based on a defined whitelist, enhancing security by preventing access to unapproved sites.
glide.security.url.whitelist.strict_check This property restricts external URL redirection based on the configured allowlist, preventing unauthorized access to external sites.
glide.security.use_csrf_token It configures the system to require a secure token for incoming requests, enhancing protection against CSRF attacks.
glide.security.use_explicit_roles This property determines whether users without 'snc_internal' or 'snc_external' roles are assigned default roles based on their classification, affecting their access to system features.
glide.security.userpref_csrf_check.enable This property activates CSRF checks specifically for user preference operations, enhancing security by preventing unauthorized actions.
glide.service_portal.rotate.guest.usertoken This property controls whether guest session tokens are rotated upon expiration, enhancing security for guest users accessing the Service Portal.
glide.set_x_frame_options It configures the X-Frame-Options header to enhance security by controlling frame embedding for UI pages.
glide.sm.default_mode This property determines the default access level for tables lacking ACLs, ensuring that security is enforced by denying access unless explicitly allowed.
glide.stax.whitelist_enabled This property determines whether a whitelist is enforced for secure glide.stax operations, impacting access permissions.
glide.sys.domain.access_handler.included_tables This property specifies the tables subject to domain access handler enforcement, impacting record visibility and access evaluation for domain-separated data.
glide.sys.domain.include_domain_condition_on_join This property controls the inclusion of domain separation conditions in join queries, ensuring compliance with domain separation for dot walked fields.
glide.sys.domain.no_change_roles This property specifies if roles can be modified in a domain-separated setup, impacting role assignment and security protocols.
glide.sys.domain.use_record_domain_for_data It limits the visibility of related data to the domain of the record being accessed, enhancing security and data management.
glide.sys.permissive.impersonate This property determines whether only users with the admin role can impersonate other users, preventing unauthorized impersonation by non-admin roles.
glide.sys.restrict_global_domain_processes This property restricts global domain users to view only their domain's records unless configured otherwise, impacting data visibility across domains.
glide.sys_reference_row_check This property enables or disables the application of script conditions in Access Control Rules for reference fields, impacting how access is validated based on scripted criteria.
glide.translated_html.sanitize_all_fields This property determines whether all translated_html fields are sanitized globally, impacting how HTML content is processed and displayed.
glide.ts.acl_checker.debug This property activates detailed logging for the TS Query Range ACL Checker, providing insights into access control evaluations.
glide.ui.active.session.life_span This property enforces a maximum lifespan for active sessions, overriding the inactive timeout setting, with a value of zero disabling session timeouts.
glide.ui.active.session_timeleft This property specifies the duration in minutes for notifying users about impending session timeouts, enhancing user awareness and session management.
glide.ui.activity.email_roles This property configures the roles that can access sent and received emails in the Activity formatter, impacting visibility for users based on their assigned roles.
glide.ui.auto_req.extend.session This property determines whether user sessions can be extended based on a selected homepage refresh interval or if they should time out according to the standard session timeout settings.
glide.ui.calendar.enable.acl This property determines whether access control lists (ACLs) are enforced for the calendar feature, restricting visibility and interaction based on user permissions.
glide.ui.concourse.onmessage_enforce_same_origin This property determines whether an origin check is enforced before propagating messages in the UI, enhancing security against cross-origin attacks.
glide.ui.concourse.onmessage_enforce_same_origin_whitelist This property defines trusted origins for message propagation via window.postMessage, enhancing security by restricting message sources.
glide.ui.escape_all_script This property ensures that all scripts in Jelly are escaped, enhancing security against potential vulnerabilities.
glide.ui.escape_html_list_field This property controls the escaping of HTML in list view fields, enhancing security by preventing script execution.
glide.ui.escape_scratchpad This property controls the escaping of string values in the scratchpad to enhance security against cross-site scripting attacks.
glide.ui.escape_text This property enables the escaping of XML values to mitigate cross-site scripting vulnerabilities within the user interface.
glide.ui.homepage.enforce_app_menu_roles This property enforces role validation for Application Menus displayed on Homepages, preventing unauthorized access.
glide.ui.impersonate_button.enable This property enables or disables the impersonation button in the banner, allowing users to switch roles within the system.
glide.ui.jelly.js_interpolation.protect This property enables or disables protection against JavaScript interpolation in Jelly scripts, enhancing security by preventing potential code injection vulnerabilities.
glide.ui.list.disable_input_validation When enabled, this property skips validation checks on server-rendered surfaces, allowing potentially problematic tables or API versions to be accessed.
glide.ui.magellan.favorites.allow_public This property restricts unauthenticated users from accessing the Favorites of the shared 'Guest' user in the navigator, enhancing security.
glide.ui.max_session_timeout It limits the maximum effective session timeout value to 1440 minutes, influencing how long a user can remain idle before being logged out.
glide.ui.mentions.check_record_visibility This property toggles the impersonation of users by the @mention system to verify their access to records.
glide.ui.rotate_sessions This property configures the system to rotate session identifiers, which helps reduce the risk of session hijacking and other security threats.
glide.ui.schedule_job_for_group_parent_change This property determines whether background jobs are utilized to assign roles based on changes to a group's parent.
glide.ui.schedule_slushbucket_save_for_group_roles This property configures the method of granting roles and groups, switching from foreground to background processing to enhance system efficiency.
glide.ui.secure.cookies.use_kmf This property activates the UserCookieV3.1 functionality, enhancing the security of user session cookies.
glide.ui.secure_cookies This property enforces strict validation for session cookies, enhancing security by requiring compliance with additional standards when version 3 cookies are enabled.
glide.ui.security.allow_codetag This property allows HTML code embedding through the [code] tag, affecting how content is rendered in the platform.
glide.ui.security.codetag.allow_script This property allows JavaScript to be included within embedded HTML code tags, affecting how content is rendered in the application.
glide.ui.session_timeleft This property specifies the time left in a user's session before a prompt appears to extend it, enhancing user experience by preventing unexpected logouts.
glide.ui.session_timeout This property configures the length of time a user session remains active before timing out, with values over 1440 minutes being capped at one day.
glide.ui.sn_access_analyzer_access_finding_activity.fields This property specifies which fields are shown in the Access Analyzer findings activity, allowing for tailored data presentation.
glide.ui.tablet.ref_list.acl_guard.enabled This property enables or disables a security feature related to the tablet reference list, allowing for a temporary restoration of unguarded functionality when necessary.
glide.ui.tree_picker.check_can_read This property determines whether ACLs on sys_user_grmember are enforced during Tree Picker operations for groups.
glide.ui.url.external.top_level_domains This property specifies which top-level domains are considered valid when determining if a string is a website address, impacting how URLs are processed in the system.
glide.ui.user_cookie.max_life_span_in_days This property defines the maximum lifespan of a user cookie, influencing how long user sessions are maintained before requiring re-authentication.
glide.ui_page.enable_acl_create_ux This property determines if a prompt for role-based ACL creation appears when accessing customer-scoped UI Pages, impacting user experience and security management.
glide.unauthorized.session_timeout This property defines the timeout period for unauthorized HTTP sessions, defaulting to 5 minutes.
glide.update_set.remote.check_host This property ensures that the Team Development Remote Instance test feature does not allow internal network port scanning by validating remote hosts.
glide.use.sunx509.as.ssl.key.manager.factory.algorithm This property enables or disables the use of the SunX509 algorithm for managing SSL keys, affecting how SSL connections are established.
glide.user.registration.google.recaptcha.secret This property enables the application to authenticate requests to the Google reCAPTCHA service, enhancing security during user registration.
glide.user.registration.google.recaptcha.site_key This property specifies the site key needed to enable Google reCAPTCHA on the user registration page, helping to verify that users are human.
glide.user.registration.pending.request.purge_interval This property defines the retention period for pending registration requests in the sys_user_registration_request table, defaulting to 48 hours.
glide.user.registration.purge_pending_requests When set to true, this property triggers the deletion of pending user registration requests based on the defined purge interval, helping maintain a clean database.
glide.user.show.password.field This property controls whether the password field is visible on the sys_user form, impacting user account management.
glide.user.trusted_domain This property configures the domains that are allowed to create new users via incoming email, defaulting to servicenow.com.
glide.uxf.cors.allowed_assets This property configures Cross-Origin Resource Sharing (CORS) rules, allowing specified external domains to access the chat widget without security restrictions.
glide.uxf.framebuster_enabled_paths This property configures the frame buster feature by defining which workspace base paths are allowed, enhancing security against clickjacking.
glide.validate.sys_user.password.field This property enforces password validation rules when modifying user accounts, ensuring compliance with established security policies.
glide.vtb.enable_list_edit_acl This property enables or disables list editing access control on Visual Task Boards, affecting user permissions when moving cards between lanes.
glide.webauthn.delete_credential_not_used_since_days This property configures the retention period for user credentials that have not been used, automatically deleting them after the specified number of days.
glide.xml.entity.whitelist This property defines a whitelist of system IDs that can be used for XML external validation, helping to prevent unauthorized access or data exposure.
glide.xml.entity.whitelist.enabled It enables the restriction of XML external entities, ensuring that only trusted sources defined in the glide.xml.entity.whitelist property are processed.
glide.xmlhttp.secure.ajaxgliderecord This property enables or disables secure AJAX calls for GlideRecord, enhancing data protection during interactions.
glide.xmlutil.max_entity_expansion This property limits the entity expansion threshold in the XML parser to enhance security and mitigate denial of service vulnerabilities.
glide_encryption.auto_key_exchange.enabled It enables automatic key exchange between two instances during cloning to enhance security.
glide_encryption.auto_key_exchange.job_restart_count This property defines the maximum restart attempts for the auto key exchange process between target and source instances, impacting key management reliability.
glide_encryption.auto_key_exchange.job_run_interval This property defines the interval, in minutes, between automatic restarts of the key exchange job to enhance encryption security.
glide_encryption.auto_key_exchange.job_start_mins This property specifies the wait time in minutes for the key exchange job to start, influencing the timing of encryption processes.
glide_encryption.cle_replatforming_with_kmf This property configures the display of a cryptographic module selector for users, allowing them to choose a module when entering data if the Key Management Framework is enabled.
glide_encryption.enterprise.get_value_support_phone_e164.return_cipher This boolean property controls the return value format for users without decryption access, impacting how sensitive information is displayed.
glide_encryption.enterprise_cle_license.hard_paywall_on This property determines whether a hard paywall is enforced for enterprise encryption licenses, impacting user access to encryption functionalities.
glide_encryption.non_password2.skip_migration_tables This property defines which tables are excluded from the scanning process for 3DES string fields during encryption migration.
glide_encryption.non_password2_migration.auto_trigger This property triggers the automatic migration of 3des string fields following an instance scan, ensuring that sensitive data is updated appropriately.
glide_encryption.non_password2_migration.table_columns This property holds a list of table and column names that have been scanned for 3DES string fields, aiding in encryption migration efforts.
glide_encryption.nonpassword2_migration.executed This property tracks the execution status of the 3DES data migration for string fields, helping to manage encryption transitions.
glide_encryption.password2_migration.executed This boolean property tracks the execution status of the password migration process, impacting how passwords are encrypted in the system.
glide_encryption.rollback_nonpassword2_legacy_migration.executed This property tracks the execution status of the rollback process for 3DES string fields data, helping to manage legacy encryption migrations.
glide_encryption.rollback_table_fields_failures_nonpassword2_migration This property defines the failure table and fields utilized when rolling back 3DES data migrations, impacting data integrity during encryption processes.
glide_encryption.scopes_skipped_on_password2_migration Specifies which encryption scopes are excluded when migrating passwords to enhance security and performance.
glide_encryption.set_value_support_cle.disabled This property determines whether the new behavior for the setValue function is active, affecting how data encryption is managed during value assignments.
glide_encryption.ssh_private_key_migration.success This property tracks the success status of the SSH private key migration process, affecting how keys are managed within the system.
glide_encryption.table_fields_with_failures_on_nonpassword2_migration This property lists specific table fields that failed during the migration process of 3DES string fields, helping to pinpoint areas needing attention.
glide_kmf.instance.kek.expiration.in.months This property defines the number of months before key encryption keys expire, impacting data security and encryption practices.
google.captcha.site_key This property defines the site key used for Google reCAPTCHA, enabling the verification of user interactions on forms.
identity.agent.role_masking.enabled This property controls whether role masking is applied to agents, restricting their access to only necessary roles during task execution.
identity.impersonation.history.enabled This property controls whether impersonation session details are recorded in the Impersonation History table, impacting security auditing and compliance.
identity.mi.buffer.size This property configures the buffer size used for machine identity management, impacting how identity data is processed and stored.
identity.mi.enabled This property determines whether the Machine Identity Management feature is enabled, impacting how machine identities are handled within the platform.
identity.mi.max.volume.allowed This property defines the upper limit of records in the Machine Identity Request table, directly impacting the functionality of machine identity management.
identity.mi.sampling.block.ratio This property configures the sampling ratio for machine identity randomization, impacting how identities are processed and managed.
identity.mi.sampling.enabled This property determines whether the Machine Identity Sampling feature is active, influencing how machine identity data is collected and utilized.
identity.mi.sampling.per.window.threshold This property defines the maximum number of machine identities that can be sampled in a given time window, influencing the efficiency of identity management.
info$encryption_wrapper.bagheera.default.key$inst_inst_09f19dd0dbb6f11039639027c5961966_sek It specifies the default key used for encrypting data within the Bagheera encryption wrapper, impacting data security.
info$encryption_wrapper.bagheera.default.key$inst_inst_27cb2d0cfbfcee901feef633beefdc17_sek It sets the default key for encrypting data within the Bagheera encryption wrapper, impacting data security practices.
info$encryption_wrapper.bagheera.default.key$inst_inst_e6d136fd1bf1f1d09377eb9b2d4bcbf1_sek It specifies the default key used for encrypting information within the Bagheera encryption framework, impacting data security.
info$encryption_wrapper.bagheera.key$inst_inst_09f19dd0dbb6f11039639027c5961966_sek This property defines a specific encryption key for the Bagheera encryption wrapper, impacting how data is secured within the system.
info$encryption_wrapper.bagheera.key$inst_inst_27cb2d0cfbfcee901feef633beefdc17_sek This property defines a string value for an encryption key that is utilized in data protection processes within the system.
info$encryption_wrapper.bagheera.key$inst_inst_e6d136fd1bf1f1d09377eb9b2d4bcbf1_sek This property defines a key used for encryption purposes, influencing how sensitive information is secured within the application.
kmf.key.exchange.batch.job.runtime_hours This property configures the runtime duration for the KMF key exchange batch job, impacting how long the job will run during execution.
kmf.key.exchange.batch.job.start_time This property specifies the scheduled start time for the KMF key exchange batch job, impacting when the job initiates.
kmf.key.exchange.batch.size This property configures the batch size for key exchanges, directly impacting the efficiency of key transmission.
mid.keystore.max_backups This property determines how many key store backups can be retained, with a default limit of three backups.
mid.webserver.cert.revocation.check.enabled This property determines whether the MID Server performs a revocation check on client certificates, enhancing security by ensuring only valid certificates are accepted.
mid.webserver.max.api.keys This property defines the upper limit for the number of API keys that can be generated for authenticating requests to the MID Web Server.
mid.webserver.ocsp.responder.url This property sets the OCSP responder URL, overriding any URL embedded in the client certificate for certificate status checks.
mid.webserver.secure_conn_fix_script_exec This boolean property determines if the fix script for the Web Server specific Keystore has been run, impacting secure web server extension functionality.
password_reset.activity_monitor.incident_threshold This property defines the threshold for the number of blocked user incidents that generate a log event, helping to track and respond to potential security threats.
password_reset.activity_monitor.incident_window This property defines the duration for which blocked user attempts are counted, impacting incident monitoring and response.
password_reset.captcha.google.enabled This property enables or disables the use of Google CAPTCHA during password resets to prevent unauthorized access.
password_reset.history.limit This property sets the limit on the number of previous passwords that are checked for reuse when a user resets their password.
password_reset.qa.num_enroll This property defines how many security questions users must answer during the enrollment phase, impacting the overall security posture of user accounts.
password_reset.redirect.allowed_domains This property defines a list of allowed domains for redirection after a password reset, ensuring that only specified hosts can be used.
password_reset.softpin.expiration_enabled This property determines whether Soft PINs are subject to expiration, promoting regular updates for security purposes.
privacy_features_showcase This boolean property determines whether certain Y features are displayed in the X release, impacting user access and functionality.
protected.script.values.kmf.rekeyed This property specifies if rekeyed values are utilized for enhanced security in protected scripts, impacting how sensitive information is managed.
pwd_reset.enable.enrollment_snapshot This property controls whether password enrollment snapshots are generated, impacting how password changes are tracked.
sa.processors.sanitize_input This property enables or disables the sanitization of input data to enhance security and prevent injection attacks.
sa.processors.sanitize_output This boolean property controls the sanitization of output data to ensure sensitive information is not disclosed.
sa.ssh.exclude_patterns This property specifies a comma-separated list of patterns that SSH will ignore during interactive sessions, impacting command execution behavior.
session.validation.enabled This property enables session validation, enhancing security by ensuring that sessions meet specified conditions and filters.
sm.pw2_secrets.enabled This property enables the handling of Password2 fields through the Secrets Management feature, enhancing security for sensitive data.
sn_access_analyzer.glide.identity.access_simulator.preview_changes_limit It restricts the rendering of the node map in the preview changes step based on the number of roles involved, enhancing usability by preventing overload.
sn_access_analyzer.glide.identity.access_simulator.take_action This property configures whether actions can be taken on Role and Group assignments during access simulations.
sn_access_analyzer.glide.identity.compare_user_access.node_map_limit It restricts the rendering of the node map based on the number of roles involved, ensuring that performance is maintained when analyzing user access.
sn_ace.ace-whitelisted-experiences This property specifies a string of whitelisted experiences that can be accessed in the Admin Experience Framework, impacting which experiences are deemed safe for use.
sn_ai_security.bedrock_priviledge.permission_policy This property configures the application to validate both IAM policies and Bedrock boundaries for role privileges, ensuring tighter security controls.
sn_anon_rc.allow_anonymous_case_access It determines whether anonymous users can access their submitted cases through a secret key, facilitating case tracking and interaction.
sn_anon_rc.arc.captcha.google.enabled This property activates Google reCaptcha V2 to ensure that anonymous case submissions are legitimate, requiring additional configuration with Google.
sn_anon_rc.secret_key_length This property determines the character length of the secret key used in the Anonymous Report Center for secure report retrieval.
sn_appclient.enable.bcfks_cert This property activates the BCFKS certificate specifically when FIPS mode is enabled on the ServiceNow instance.
sn_atf.headless.secret_name This property defines the Docker secret name used for the user account's secret_id password, impacting how credentials are managed in a headless testing environment.
sn_atf.snc_read_only_role_exemptions This property specifies which roles can bypass read-only restrictions in ATF, allowing for more flexible testing scenarios.
sn_badge.disable_access_token This property allows administrators to bypass the access token requirement for the BadgeReader API, facilitating easier testing and integration.
sn_build_agent.script_execution_enabled This property enables or disables the run_script tool for the agent on a per-instance basis, affecting script execution capabilities.
sn_cd.activate_audience_delegation_controls This property allows the assignment of ownership for audiences in Content Publishing, facilitating better control over audience management.
sn_cd.activate_content_authoring_controls This boolean property allows the assignment of ownership for content items, facilitating better management and editing capabilities within Content Publishing.
sn_cd.activate_page_ownership This property enables the restriction of content assignment on portal pages to designated users, enhancing content management control.
sn_cd.activate_topic_ownership This property allows users to claim ownership of topics, providing them with the ability to manage content scheduling, editing, and previewing for those topics.
sn_cd.min_admin_count It enforces a minimum of two active Content Publishing admin users to maintain administrative access and functionality.
sn_cm_core.enable_executed_contract_audit_certificate When set to true, this property ensures that a certificate of completion, including an audit trail, is generated and attached to the contract repository record for electronically signed contracts.
sn_cmp.error_events.default_domain It assigns a default domain to unassigned error events, limiting their visibility to the specified domain's administrator.
sn_communities.blog_count This property defines the daily limit on blog posts per user, helping to control content volume and maintain quality within the community.
sn_communities.default_permission_for_forum_memberships It determines the default permission assigned to forum memberships, impacting user access to forum content.
sn_communities.disable_terms_conditions_role It allows designated roles to skip the acceptance of terms and conditions when participating in community activities.
sn_communities.edit_content_explicit_role This property specifies a comma-separated list of roles that allow users to edit existing content while preventing them from creating new content.
sn_communities.event_count It defines the daily posting limit for events by users, with a default value of 20.
sn_communities.implicit_access_mapping This property defines implicit access rights for community users, mapping roles like forum_admin and forum_moderator to specific permissions.
sn_communities.is_content_write_allowed_for_guest_user This boolean property controls whether non-logged-in users are granted content write access in community settings based on admin permissions.
sn_communities.public_forum_user It defines the specific user ID used to calculate access permissions for public forum interactions within the Communities application.
sn_communities.registered_forum_user It sets the identifier for the Registered Forum User, which is used to calculate access permissions for forum interactions.
sn_cs_queryrules.use_query_rules When enabled, this property uses the sn_query_rule table to manage read access for customer service management tables, impacting how data is filtered for users.
sn_customerservice.account_relationship_access_roles This property specifies which roles are shown in the reference qualifier for account relationship access, impacting user permissions and visibility.
sn_customerservice.captchaEnabled This property enables or disables CAPTCHA validation for customer registration, helping to secure the portal against bot-driven attacks.
sn_customerservice.contact_relationship.restrict_within_account_hierarchy When enabled, this property limits the display of contacts to those within the account hierarchy, preventing users from accessing contacts from unrelated accounts.
sn_customerservice.contact_role_assignment This property specifies a comma-separated list of roles that can be assigned to contacts, impacting their access and capabilities within the Customer portal.
sn_customerservice.glide.script.block.client.globals This boolean property controls the execution of client-side global scripts in the Customer Service application, impacting security and functionality.
sn_cwm.enable_granular_security This property determines whether per-row field write access is evaluated for each work item on a CWM Board, affecting how edits are saved based on user permissions.
sn_cwm.request_role_access This property controls the visibility of the Request Access button for non-CWM users, enabling them to initiate access requests when set to true.
sn_devops.discovered.user.auto.assign.role This property configures the default role assigned to active DevOps users, impacting their access and capabilities within the system.
sn_devops.glide.script.block.client.globals This boolean property, when set to true, blocks the use of client-side global variables in scripts, enhancing security in the DevOps Data Model.
sn_devops.non_admin_software_quality_summary_flag This boolean property controls access to software quality summaries for non-admin users within the DevOps Data Model.
sn_devops.permission_check_timeout This property determines the timeout duration for permission validation checks against external tools, impacting how quickly errors are reported during tool connections.
sn_dpr.complete_phase_override This property specifies which user roles are permitted to complete a release phase, with the default role being sn_dpr_model.release_admin.
sn_dpr.out_of_band_release_roles This property specifies the roles that can create one-off releases within the Digital Product Release application, impacting release management workflows.
sn_em.impersonateCheck This property enables ACL checks for user impersonation, ensuring that only legitimate users can access specific data.
sn_enc_starter.com.glide.field.encryption.denylist.rowconfigtables This property defines a list of tables that cannot have row conditions applied, ensuring compliance and security in data handling.
sn_esign.min_admin_count It enforces a minimum of two active e-signature admin users to maintain administrative access and functionality within the e-signature application.
sn_ext_usr_reg.Temp_user_record_purge_days This property specifies the number of days that registration records are kept before being purged from the user_registration_request and sn_ext_usr_reg_request tables.
sn_ext_usr_reg.allowed_email_domains This property defines a comma-separated list of acceptable email domains for self-registration, enhancing security by restricting unwanted domains.
sn_ext_usr_reg.captchaEnabled This property determines whether CAPTCHA validation is enforced for external user registrations, enhancing security against bot-driven attacks.
sn_ext_usr_reg.eur_user_role This property defines the role that is automatically assigned to users when they register themselves in the system, influencing their permissions and access rights.
sn_ext_usr_reg.request_count It sets the maximum number of registration link requests to a specified integer value, with a default of 3.
sn_fsm.use_query_rules This property controls the application of query rules for read access to Field Service Management tables, filtering records based on user roles and territories.
sn_hr_core.impersonateCheck This property, when set to true, restricts impersonated users from accessing HR data, ensuring that sensitive information remains protected.
sn_hr_core.min_admin_count This property enforces a minimum of two active HR admin users, preventing the deletion of the last remaining HR admin to maintain operational integrity.
sn_hr_core.rca This property determines whether caller access to HR script includes is restricted during the zboot phase, enhancing security for sensitive HR operations.
sn_hr_core.task_template_variable_ignore It prevents specified sensitive variables from being interpolated in HR task templates, ensuring they remain confidential.
sn_hr_ef.min_admin_count It enforces a minimum of two active scoped admins for the Employee Document Management application to prevent accidental loss of administrative access.
sn_hr_ef_pa.min_admin_count This property defines the minimum count of administrators needed for effective performance analytics within the Human Resources application.
sn_hr_le.min_admin_count This property enforces a minimum of two active HR Lifecycle Event administrators to maintain system integrity and prevent administrative lockout.
sn_instance_clone.glide.clone_app.use_mtls This property configures the use of mutual TLS for the CloneRestService, affecting how secure connections are established in different ServiceNow environments.
sn_invst_pln.glide.script.block.client.globals This boolean property controls the blocking of client-side global variables, impacting how scripts interact with the Financials Core application.
sn_kmf.allow_all_permissive_wrapping_of_keys When enabled, this property allows key wrapping to proceed without MAP checks, reverting to default behavior.
sn_kmf.crypto_module.access_policies.allow_unsigned_records It enables the upgrade process for Runtime KMF Secure Modules by allowing unsigned records during the upgrade.
sn_kmf.glide.script.block.client.globals This boolean property, when set to true, prevents the use of client-side global variables in scripts, enhancing security by limiting exposure to potential vulnerabilities.
sn_kmf.kmfutil_api_check This property controls access to restricted APIs in the KMFUtil script include, reverting to legacy behavior if disabled.
sn_kmf.protected_script_encrypter.use.newkey This property determines whether a new key is generated for the Glide protected script encrypter, enhancing script security.
sn_kmf.revocation.response.connect.timeout This property defines the timeout duration for connecting to a revocation responder, impacting how quickly the system will give up on establishing that connection.
sn_kmf.revocation.response.read.timeout This property defines the timeout duration in milliseconds for reading responses from revocation responders, impacting the efficiency of revocation operations.
sn_mid_infra.disallowed_mid_roles_for_ipki This property defines a list of MID server roles that cannot be assigned to IPKI, enhancing security by restricting role usage.
sn_mid_infra.registration_key.max_use_count This property limits the number of allowed uses for a registration key, enhancing security by preventing excessive failed registration attempts.
sn_nowassist_admin.whitelisted_scopes This property configures the allowed scopes for the AI Admin Hub, impacting which functionalities can be accessed based on scope permissions.
sn_oe_sfs.u_com.glide.cs.collab_additional_access_check_enabled This property determines whether additional access checks are enforced for collaboration features in the Omni-Experience Standard Feature Set.
sn_pipeline.request_token_expiration_sec This property defines the time interval that a request authentication token remains valid for verifying requests from a specific environment.
sn_publications.glide.script.block.client.globals This boolean property controls the blocking of client-side global variables in the context of targeted communications, affecting script behavior.
sn_res_shaper.show_rs_roles This property specifies a comma-separated list of roles that can access the Resolution Shaper, controlling its visibility in the user interface.
sn_shop.inactivity_session_timeout This property sets the timeout duration for user sessions in the ShopNow portal, defaulting to 5 minutes.
sn_sow_exp_app.allowed_user_role_for_view This property defines the user roles permitted to assign the express list view in the Service Operations Workspace.
sn_spm_ewd.allow_admin_access_to_all_partitions This property controls whether administrators can access all partitioned data across the deployment or are restricted to their assigned partitions.
sn_uni_req.min_admin_count It defines the minimum count of active scoped UR admin users needed to maintain access and functionality within the Universal Request application.
sn_uni_req_ml.sensitive_detection This property identifies and marks Universal Requests as sensitive if they contain sensitive information in their descriptions, enhancing data protection.
sn_uni_req_ml.sensitive_detection.min_confidence It determines the confidence level needed for the system to automatically mark Universal Requests with sensitive information as restricted.
sn_uni_task.min_admin_count This property specifies the minimum count of active scoped Universal Task admin users, defaulting to two, to ensure continuous administrative support for the application.
sn_wsd_core.OVERRIDE_RESERVATION_PRIVACY It enables employees to bypass location privacy restrictions on reservations, allowing for greater accessibility to reserved spaces.
sn_wsd_core.PRIVACY_INFORM_EMPLOYEE This property allows the system to inform employees when their location privacy settings are applied, ensuring they are aware of privacy measures in place.
sys_kmf_instance_level_encrypter_exclusion_list This property prevents designated source IDs from using instance-level encryption, allowing them to rely on legacy encryption methods instead.
team_calendar.enable_for_grpmember This property allows assignment group members to view each other's schedules on the team calendar, enhancing collaboration.
user.role.history.enabled This property determines if the User Role History feature is active, affecting how user role changes are logged and monitored.
watson_assistant.x_watson_learning_opt_out This property controls the logging of requests and results by Watson services, allowing users to opt out of data collection for service improvement purposes.