Property reference

`com.glide.sys.security.delegateddev.block_grant_roles`

The property com.glide.sys.security.delegateddev.block_grant_roles prevents delegated developers from assigning roles to users through scripts. Setting this property to true enhances security by blocking unauthorized privilege escalation, which is crucial for maintaining proper access control.

Default: Not stated
Type: Not stated
Application: Not stated

Key questions about this property

The answers below summarize the purpose, scope, default effect, and review scenarios for this property.

What does it do?	This property restricts delegated developers from modifying user roles in the sys_user_has_role table unless they possess the user_admin role, thereby enforcing stricter access controls.
What area does it affect?	Access control security
What does the default mean?	No default value is stated in the ServiceNow documentation.
When should you review it?	Review this property when configuring delegated developer permissions or during security audits.

Property record

Facts stated in the ServiceNow documentation. No out of the box record has been read from an instance yet.

Property name	`com.glide.sys.security.delegateddev.block_grant_roles`
Type	Not stated
Application	Not stated
Default value	Not stated
Description	Not stated

Sources

Official references and nearby text excerpts where this property appears.

Brazil docs View supporting context

Context preview Snippet 1

... is able to perform. Block access for delegated developers • Description ◦(Old‎ <blank> ◦(New‎ This property determines whether a delegated developer can give assign roles to users through scripts. If "com.glide.sys.security.delegateddev.block_grant_roles" is not set to the recommended value of "true", then a delegated developer could assign roles to any user. This could lead to unapproved privilege escalation. • Security Risk ◦(Old‎ ...

More in `com.glide`

Other properties in the same namespace.

com.glide.sys.fencing.rca.source_handler.jelly_phase2_ui_macro_detection This boolean property determines whether the system detects Jelly Phase 2 UI macros, impacting how UI elements com.glide.sys.glide_language_cookie_enabled This property determines whether language preference cookies are enabled, allowing the system to retain user-s com.glide.sys.ip_geolocation_enabled This property enables geolocation-based language detection for guest users based on their IP address. com.glide.sys.log.source.enabled This property controls whether source logging is active, affecting the visibility of log entries related to th com.glide.sys.user_hash_salt This property configures the salt used in the hashing process for user passwords, enhancing security against a com.glide.sysevent.priority.enabled This property determines whether events are processed in order of priority, with lower values indicating highe com.glide.system_parallel_job.thread_run_time This property configures the maximum run time for system parallel jobs, influencing how long these jobs can ex com.glide.system_parallel_job_auto_retry This property determines whether failed parallel jobs are automatically retried, enhancing job reliability in

All 831 properties in com.glide →