Category · 145 properties

ServiceNow Security Operations, Risk & GRC properties

These properties govern configuration across ServiceNow Security Operations, risk, and governance, risk, and compliance capabilities, including security event handling, data privacy, and compliance-related processing. Administrators and developers can consult them when reviewing or changing behavior in these areas, such as checking com.glide.data_privacy.max_parallel_workers or evt_mgmt.ignore_retired_cis_in_binding.

Most common namespaces: sa_analytics 26 sn_compliance 18 Other namespaces 17 sn_grc 17 glide.ui 16 sn_smart_asmt 14

`com.glide.codesigning.tables.excluded_from_audit`	This property lists tables that do not generate audit entries for create, update, or delete operations, helping to maintain focus on significant changes in protected code artifacts.
`com.glide.data_privacy.brazil_support`	This property suppresses Brazil-specific features in the Australia release UI for the Data Discovery and Data Privacy store app, ensuring localized functionality.
`com.glide.data_privacy.consolidation_user_retention_limit`	This property limits the number of users retained in the system during the consolidation of sensitive data for privacy purposes.
`com.glide.data_privacy.max_parallel_workers`	This property configures the maximum number of parallel workers that can be used for data class and user-based anonymization jobs, enhancing performance during execution.
`com.glide.event_handler.security_event_sender`	This property defines the class used to transmit security events to the Usage Analytics module, impacting how security data is collected and analyzed.
`data_input_mapping.max_examples`	This property configures the upper limit of log samples used in Health Log Analytics tests, impacting the accuracy and performance of log analysis.
`evt_mgmt.ignore_retired_cis_in_binding`	This property controls the binding of events to retired CIs, allowing or preventing such associations based on its value.
`evt_mgmt.maintenance_rule_include_retired`	This property configures the inclusion of retired CIs in maintenance rules, affecting how maintenance status is applied within the Event Management module.
`evt_mgmt.network_path_excluded`	It prevents network paths from appearing in the impact tree, optimizing resource usage and enhancing system performance.
`evt_mgmt.top_priority_group_threshold`	This property determines the threshold value above which alerts are classified as Urgent, ensuring that the most critical issues are addressed first.
`glide.ais.require_retention_policy`	This property determines whether a retention policy is required for automated incident systems, influencing how long data is kept.
`glide.allow.new.cert_follow_on_task`	This property allows the system to automatically create follow-on tasks for certifications during each audit run, facilitating better management of audit processes.
`glide.identity.aclanalyzer.access_insights_enabled`	This property toggles the activation of the access insights feature, impacting how access data is analyzed and reported.
`glide.identity.aclanalyzer.access_insights_peer_level_columns`	This property configures the specific columns, such as department, manager, and company, that are used to establish peer groups within the Access Analyzer.
`glide.scan.enable_point_scan_ui_action`	This property determines whether the point scan UI action is available for records, enabling users to execute scans on individual records based on specific conditions.
`glide.ui.em_alert_activity.fields`	This property defines which fields are included in the alert activity formatter, impacting how alert information is presented to users.
`glide.ui.risk_calculate_rule`	This property allows the configuration of risk calculation triggers, either through UI Actions or business rules, impacting how risks are evaluated during record insertions or updates.
`glide.ui.sn_compliance_policy_statement_activity.fields`	This property specifies which fields are shown in the objective activity formatter, impacting how compliance information is presented to users.
`glide.ui.sn_esg_disclosure_activity.fields`	This property defines which fields are included in the disclosure activity formatter, impacting how information is presented and managed.
`glide.ui.sn_esg_material_topic_activity.fields`	This property specifies the fields, such as name and priority, that appear in the Material Topic activity formatter, impacting how data is visualized.
`glide.ui.sn_grc_issue_activity.fields`	This property configures the specific fields shown in the GRC issue activity view, affecting how information is presented to users.
`glide.ui.sn_grc_metric_data_task_activity.fields`	This property specifies which fields are shown in the Metric Data Task activity formatter, impacting how task details are presented to users.
`glide.ui.sn_grc_profile_activity.fields`	This property defines the specific fields that appear in the entity activity formatter for GRC profiles, influencing how activity data is presented.
`glide.ui.sn_grc_profile_class_rule_filter_activity.fields`	This property specifies which fields are included in the entity class rule filter activity formatter for GRC profiles, impacting how data is presented and interacted with.
`glide.ui.sn_grc_profile_class_rules_activity.fields`	This property configures which fields are shown in the Entity Class Rule activity formatter for GRC profiles, affecting user interaction and data presentation.
`glide.ui.sn_pace_policy_activity.fields`	This property defines which fields are shown in the policy activity formatter, impacting how policy activities are presented to users.
`glide.ui.sn_vsc_best_practice_configurations_activity.fields`	This property specifies which fields are included in the best practice configurations activity formatter, impacting how information is presented in the Security Center.
`glide.ui.sn_vsc_instance_hardening_settings_activity.fields`	This property specifies which fields are included in the Instance Hardening Settings activity formatter, impacting the visibility of key security-related information.
`glide.ui.sn_vsc_security_policy_activity.fields`	This property specifies which fields are included in the security policies activity formatter, impacting how security-related activities are presented to users.
`glide.ui.sn_vsc_security_task_activity.fields`	This property specifies which fields are included in the security tasks activity formatter, impacting how task information is presented to users.
`glide.ui.sn_vsc_vault_security_configurations_activity.fields`	This property specifies which fields are shown in the Vault Security Configurations activity formatter, impacting how security data is presented to users.
`identity.mi.sampling.window.in.minutes`	This property configures the time window for sampling machine identities, influencing how frequently identity data is collected and processed.
`sa.active_operation_status`	This property specifies the operational statuses that the system recognizes during the default binding of alerts to configuration items based on the node field.
`sa_analytics.agg.alert_grouping.num_of_jobs`	This property sets the number of scheduled jobs that aggregate alerts, enabling efficient processing of alerts in Service Analytics.
`sa_analytics.agg.group_alert_with_same_assignment_group_only`	This property determines whether alerts with the same assignment group are grouped together, optimizing alert management and processing.
`sa_analytics.agg.learner_domain_level`	It specifies the domain level used for grouping alerts, enabling better organization and correlation of related issues within the Service Operations Workspace.
`sa_analytics.agg.learner_period_days`	This property sets the number of days the system uses to analyze alerts for pattern identification, impacting how alerts are grouped for reporting.
`sa_analytics.aggregation_enabled`	This property enables the aggregation of alerts based on predefined criteria, facilitating better organization and analysis of alerts across multiple group types.
`sa_analytics.alert.severity_threshold`	This property determines the severity threshold above which alerts are included in alert aggregations and root cause analysis.
`sa_analytics.enable_no_ci_grouping`	This property enables the grouping of alerts that lack associated CIs, facilitating better organization and analysis of alert data.
`sa_analytics.enable_process_mapping_calculation`	This property enables or disables the calculation of process mapping, impacting how alerts are correlated based on process data.
`sa_analytics.hla_query_job_enabled`	This property determines whether legacy HLA grouping is active, influencing the method used for grouping analytics data.
`sa_analytics.included_domains_for_filter`	This property defines a comma-separated list of domain sys_ids that are permitted to change or add filters in the Grouped Alert Filters table.
`sa_analytics.mixed_grouping_by_service_order_criteria`	This property configures the grouping criteria for analytics data, allowing for prioritization based on specified attributes such as business criticality and creation date.
`sa_analytics.mixed_grouping_ignore_non_operational_service`	This property, when set to true, excludes non-operational services from mixed grouping analytics, enhancing the relevance of the data presented.
`sa_analytics.pred.cl_min_conditional_probability`	This property defines the minimum confidence score required to generate an alert prediction, influencing the frequency and relevance of alerts.
`sa_analytics.query_job_enabled`	This property enables or disables the alert aggregation feature, affecting the execution of related processes in the ServiceNow platform.
`sa_analytics.rca.input_purge_days`	This property determines the retention period for RCA input data in staging tables, defaulting to 90 days.
`sa_analytics.rca.learner_group_interval_secs`	This property defines the interval in seconds that alerts must be created within to be considered part of the same group for root cause analysis.
`sa_analytics.rca.learner_query_interval_secs`	This property specifies the duration for which alerts are considered in root cause analysis for business services, impacting the analysis accuracy.
`sa_analytics.rca.output_purge_days`	This property determines the retention period for RCA output data, defaulting to 3 days, before it is automatically purged from the system.
`sa_analytics.rca.query_probability_threshold`	It defines the confidence score percentage threshold that must be met for RCA correlated alert groups to appear in the Event Management Dashboard and Alerts Console.
`sa_analytics.rca.smc_model`	This property determines whether a binary model is utilized for root cause analysis, impacting how root causes are identified and analyzed.
`sa_analytics.rca_same_reasoning_use_newer`	This property configures the scoring order for root cause analyses with identical reasoning, allowing newer changes to be prioritized over older ones if enabled.
`sa_analytics.rca_task_table_max_records`	This property determines the limit on the number of probable root causes presented in the analysis table, impacting how many potential issues are visible to users.
`sa_analytics.specific_patterns_enabled`	This property activates machine learning algorithms to identify and group alerts based on specific patterns, enhancing alert correlation efficiency.
`sa_analytics.state_model_configuration`	This property sets the default state model configuration by referencing a unique sys_id, impacting how states are managed in analytics.
`sa_analytics.text_based_group_enabled`	It activates the use of Natural Language Processing algorithms to group alerts based on text similarity, enhancing the efficiency of alert management.
`sa_analytics.use_impacted_services_for_mixed_grouping`	This property configures the grouping criterion for alerts, allowing them to be organized by either impacted services or service associations based on its boolean value.
`sn_acc_vis_content.enable_full_monitoring`	This property enables the collection of detailed web usage data from Windows and macOS managed devices, allowing for improved monitoring and analysis.
`sn_acc_vis_content.tls_ssl_keep_original`	This property, when set to true, enables the storage of original TLS/SSL certificates within the ServiceNow instance for better management and tracking.
`sn_aia.external_agent_guardian_check`	This property activates Guardian, which safeguards LLM interactions by detecting offensive content, prompt injection attempts, and filtered subjects.
`sn_badge.disable_badge_scans`	This property disables badge reader scan events when set to true, preventing any badge scans from being processed.
`sn_bcm_map.use_google_places_lib`	This property allows the Crisis map to utilize Google Places API for location searches, facilitating better situational awareness during crisis management.
`sn_compliance.active_states`	This property specifies the states in which compliance controls are considered active, impacting compliance score calculations.
`sn_compliance.attestation_run_reference_date_field`	This property specifies whether the last completed attestation's created or updated date is used as the reference for triggering subsequent control attestations.
`sn_compliance.auto_create_profile_and_control`	It automatically generates compliance profiles and controls when configuration tests indicate non-compliance, facilitating efficient compliance management.
`sn_compliance.automatically_close_task_when_all_control_items_are_compliant`	This boolean property determines whether remediation tasks are closed automatically upon all associated controls achieving compliance.
`sn_compliance.cal_score_by_weighted_control`	It configures the calculation method for compliance scores by allowing weighted averages instead of flat averages, influencing the accuracy of compliance assessments.
`sn_compliance.calc_empty_downstream_scores`	This property configures the inclusion of all control objectives and related entities in compliance score calculations, regardless of their direct control relationships.
`sn_compliance.closed_states`	It specifies which states are treated as inactive for compliance controls, impacting the compliance score calculation.
`sn_compliance.compliance_score_refresh`	This property specifies the interval in minutes for verifying updates to the compliance table, impacting the accuracy of compliance scores.
`sn_compliance.default_approval_span`	This property defines the standard approval period for policy exceptions, influencing how long approvals remain valid before renewal is needed.
`sn_compliance.default_maximum_exception_duration`	This property defines the maximum number of days for which a policy exception can be requested, influencing compliance management processes.
`sn_compliance.enable_association_of_citations_to_controls`	Enabling this property allows citations to derive their compliance scores from linked controls rather than control objectives, affecting compliance evaluations.
`sn_compliance.enable_control_objective_workflow`	This property activates the control objective workflow, allowing for improved management and tracking of compliance objectives within the GRC framework.
`sn_compliance.enable_smart_assessments`	This property enables the use of a non-classic assessment engine for evaluating controls in the Governance, Risk, and Compliance module.
`sn_compliance.entity_hierarchy_based_scoring`	This boolean property determines whether scoring is influenced by the entity hierarchy, impacting how compliance is assessed within the GRC framework.
`sn_compliance.maximum_extensions_allowed`	This property defines the integer limit on the number of extensions that can be granted for policy exceptions in the GRC module.
`sn_compliance.policy_expiry_to_review_timer`	It sets a timer for transitioning expired policies back to a Draft/Review state, facilitating timely compliance checks.
`sn_compliance.requester_approver_exclusion`	It enforces a rule that disallows the requester of a policy exception from approving that same exception, promoting accountability.
`sn_compliance.use_new_pe_approval_config`	This property switches the approval mechanism for policy exceptions from legacy rules to the GRC Approval Configurator.
`sn_disco_firewall.default.rule.task.approval.group`	It sets the name of the group responsible for approving firewall rule change requests, facilitating automated task management.
`sn_disco_firewall.default.rule.task.policy.owner.group`	It sets the name of the assignment group responsible for firewall rule tasks, which must include the 'Firewall User' role.
`sn_grc.allowed_fca_tables`	This property defines the allowed tables for entity creation in the GRC application under limited access conditions.
`sn_grc.auto_create_indicator`	This boolean property determines whether indicators are automatically created for items linked to indicator templates, enhancing workflow efficiency.
`sn_grc.auto_indicator_issue_closure`	This boolean property determines whether issues generated by indicators are automatically closed, enhancing efficiency in issue tracking.
`sn_grc.auto_populate_due_date_based_on_issue_rating`	This boolean property determines whether due dates are automatically set according to the issue rating, facilitating better prioritization in issue management.
`sn_grc.automatically_close_issue_when_all_tasks_closed`	It enables the automatic closure of issues in the GRC application once all related tasks are marked as closed.
`sn_grc.batch_size_to_sync_entity_owner_field`	This property defines the maximum batch size for syncing entity names and owners, impacting data synchronization efficiency.
`sn_grc.batch_size_to_sync_user_hierarchy`	This property defines the maximum batch size for recalculating user hierarchy records, impacting the efficiency of synchronization processes.
`sn_grc.consolidated_questions_limit`	This property defines the cap on the total number of questions that can be included in a single grouped assessment response, defaulting to 1000 questions.
`sn_grc.default_redlining_doc_text_sync`	This property configures the default behavior for synchronizing redlining document text within GRC profiles.
`sn_grc.enable_consolidate_asmt`	When enabled, this property adds a grouping option for assessments that allows users to provide the same response for all selected assessments, simplifying the attestation process.
`sn_grc.enable_entity_scoping_for_cmdb_query`	This property configures whether entity scoping is applied to CMDB queries, impacting data visibility based on user roles.
`sn_grc.enable_groups_access`	This property allows users in designated access groups to access specific records within the GRC application.
`sn_grc.enable_record_confidentiality`	This property controls whether record-level confidentiality is enforced, determining who can access sensitive information within GRC profiles.
`sn_grc.enable_user_hierarchy_access_control`	This property configures access control based on user hierarchy, allowing only users with the appropriate roles to access specific records.
`sn_grc.enhance_issue_grouping`	This property enhances issue grouping by ensuring that confidential child issues are not displayed under non-confidential parent issues, promoting better data management.
`sn_grc.glide.script.block.client.globals`	This boolean property controls the blocking of client-side global variables in GRC profiles, enhancing security by preventing unintended access.
`sn_grc.indicator.default.sample_size`	This property configures the default number of records to be included in indicator templates and indicators, influencing data collection efficiency.
`sn_grc_ai_gov.ai_system_automated_risk_classification_asmt_ram`	This property configures the default RAM used for automated risk classification of AI systems at the point of intake, impacting how risks are assessed and categorized.
`sn_grc_ai_gov.aisystem_primary_ram`	This property sets a default RAM that is applied to all risk assessments for AI systems, facilitating standardized risk evaluation and classification.
`sn_grc_ai_gov.highlighted_authority_document`	This property allows the selection of up to two authority document Sys IDs for display in the compliance overview section of the Risk & Compliance dashboard.
`sn_grc_ai_gov.highlighted_policy`	This property allows the selection of up to two policy Sys IDs to be prominently displayed on the home page for compliance purposes.
`sn_grc_case_mgmt.enable_smart_assessments`	This property determines whether compliance case assessments utilize the smart assessment engine or revert to the classic assessment method, impacting user experience and assessment capabilities.
`sn_hs_im_osha.osha_300_form_pdf_template_sys_id`	It specifies the unique identifier for the OSHA 300 form PDF template, impacting how the form is generated and displayed.
`sn_hs_im_osha.osha_301_form_pdf_template_sys_id`	This property defines the unique identifier for the OSHA 301 form PDF template used in health and safety case management.
`sn_irm_shared_cmn.config.get_gliderecord_limit`	This property defines the default limit of 1000 for the number of BIA records processed by the IRM GlideRecord getter, impacting how many records can be handled at once.
`sn_irm_shared_cmn.estimated_scores_last_calculated_on`	This property stores the timestamp of the last calculation of estimated scores, impacting risk management processes.
`sn_irm_shared_cmn.license_snapshot_job_status`	This property indicates whether the license snapshot job is in a 'ready' state or another status, impacting job execution and monitoring.
`sn_itom_pattern.container_image_scan`	This property activates the mechanism for scanning container images for vulnerabilities, which is essential for maintaining security in cloud environments.
`sn_itom_pattern.image_scan_process_containers`	This boolean property determines whether process containers are included in image scans, affecting the thoroughness of the scanning process.
`sn_itom_pattern.sbom_format`	This property configures the output format for SBOM generation, allowing options like CycloneDX and SPDX.
`sn_oper_res.allowed_task_tables`	This property defines a list of task tables that are considered during operational resilience assessments, impacting how tasks are processed and reported.
`sn_oper_res.red_flags_exclusion`	This property allows administrators to exclude specific classes from being displayed in the Red Flags section, affecting how service-related incidents and vulnerabilities are reported.
`sn_recovery.max_activated_plan_levels`	This property sets the limit on the number of hierarchical levels of activated plans that can be created during an event, allowing for better organization of recovery tasks.
`sn_risk_advanced.risk_event_currency_conversion_date_config`	This property allows the selection of specific dates for currency conversion in risk event entries, enhancing the accuracy of financial assessments.
`sn_rpa_fdn.code_signing_required`	This property requires a code signing certificate during the publishing of automation projects from RPA Desktop Design Studio, ensuring that the packages are secure and unaltered.
`sn_sec_cmn.update_on_ci_change`	This property controls the behavior of updating vulnerable items in response to changes in configuration items, affecting how vulnerabilities are managed within the system.
`sn_sec_gen_ai.correlation_lookback_period`	This property sets the duration for which correlation insights are generated, impacting how far back in time the system looks for relevant data when analyzing security incidents.
`sn_sec_ra.card_action_config`	This property configures whether recommended actions in security incidents lead to creating a response task or saving to work notes.
`sn_sec_tisc.extract_observables_from_indicator`	This property controls whether observables are automatically extracted from newly created indicator records, facilitating better threat analysis and response.
`sn_si_aw.collapse_tab`	This property configures the default state of the contextual menu panel in the Security Incident Response Workspace, allowing it to be either collapsed or expanded.
`sn_smart_asmt.assessor_persona`	This property defines which assessor persona is utilized in the Smart Assessment Core, influencing assessment workflows and user interactions.
`sn_smart_asmt.attachment_question_type_id`	This property defines the unique identifier for the attachment question type within the Smart Assessment application.
`sn_smart_asmt.barcode_question_type_id`	This property defines the unique identifier for the barcode question type used in Smart Assessment, impacting how barcode questions are processed.
`sn_smart_asmt.calender_question_type_id`	This property defines the unique identifier for the calendar question type used in assessments, impacting how questions are structured and displayed.
`sn_smart_asmt.cancelled_workflow_state`	This property specifies the unique identifier for the cancelled workflow state used in Smart Assessment processes.
`sn_smart_asmt.checkbox_question_type_id`	This property specifies the unique identifier for the checkbox question type used in Smart Assessment configurations.
`sn_smart_asmt.completed_workflow_state`	This property defines the specific completed workflow state used in the Smart Assessment application, impacting how completed assessments are processed and tracked.
`sn_smart_asmt.dropdown_question_type_id`	This property defines the specific Sys ID associated with the dropdown question type in the Smart Assessment application, impacting how dropdown questions are rendered.
`sn_smart_asmt.max_asmt_in_cmb_asmt`	This property limits the number of assessments that can be combined into a single group, affecting how assessments are organized and managed.
`sn_smart_asmt.number_question_type_id`	This property holds the Sys ID for the number question type, enabling the system to recognize and utilize this specific question format within assessments.
`sn_smart_asmt.open_workflow_state`	This property defines the specific open workflow state in the Smart Assessment application, influencing how assessments progress through their workflows.
`sn_smart_asmt.radio_question_type_id`	This property defines the unique identifier for the radio question type within the Smart Assessment application, influencing how questions are presented to users.
`sn_smart_asmt.reference_question_type_id`	This property defines the unique identifier for the reference question type within the Smart Assessment application.
`sn_smart_asmt.textbox_question_type_id`	This property holds the Sys ID for the textbox question type, affecting how these questions are rendered and processed in Smart Assessment.
`sn_vsc.configure_security_banner_announcements`	This property enables security banner announcements to notify users of security-related updates and alerts.
`sn_vsc.first_time_modal_user_preference.hide.modal_duration`	This property specifies the number of days the first-time experience modal in the Security Center remains hidden for users.
`sn_vsc.security_task.automated_task.enabled`	This property determines whether automated security tasks are active, impacting the efficiency of security operations.
`sn_vsc.security_task.hardening.deviation.threshold`	This property sets the threshold for triggering security tasks based on the decline in hardening scores, requiring a positive integer value.
`sn_vul.service_classifications`	This property allows admins to specify a comma-separated list of service classifications to filter the data shown in Vulnerability Response reports and related lists.
`sn_vul.unassign_vr.approval_required`	This property controls the requirement for approval when a record is unassigned, impacting the workflow for vulnerability management.
`sn_vul_wiz.deployment_context_gate_writes`	This property deactivates the Wiz Container Grouped Vulnerability and Wiz Container Deployment Context integrations, allowing for container vulnerable item creation based on existing settings.