Get a first look at what's coming. The Developer Passport Australia Release Preview kicks off March 12. Dive in! 

sarah_bioni
ServiceNow Employee

Update Sets are one of the most widely used deployment mechanisms in ServiceNow. However, a very common — and risky — practice still exists in many projects: adding data records to Update Sets using the “Add to Update Set” UI Action.

This article explains why adding records to Update Sets is not recommended, what can happen during a rollback, and which safer alternatives should be used instead.


The Core Problem

Many users use the “Add to Update Set” UI Action (related link) to capture records (not configuration) and move them between environments.

At first, this seems convenient.
In reality, it introduces a high risk of data loss, especially when rollbacks are involved.


What Happens During a Rollback

When an Update Set that contains records is rolled back, ServiceNow attempts to reverse what was deployed.

The consequence:

  • Records added via Update Set can be deleted from the target environment
  • References associated with those records can also be lost (if the reference cascade not configured correctly)
  • The rollback does not restore the previous data state
  • There is no automatic recovery of deleted records (if the table is not audit)

Why Update Sets Are the Wrong Tool for Data/Records

Update Sets are designed for configuration, such as:

  • Application metadata
  • Dictionary changes
  • Scripts, rules, and UI elements
  • Structural platform components

They are not designed for:

  • Business data
  • Transactional records
  • Reference data

Using Update Sets to move records creates a fragile deployment model that breaks easily during rollback scenarios.


The Risk of “Add to Update Set”

The “Add to Update Set” UI Action makes it technically possible to capture records — but possible does not mean safe or supported.

Common risks include:

  • Accidental deletion of records after rollback
  • Inconsistent data between environments
  • Broken references
  • False sense of recoverability

Recommended Best Practices

Use Update Sets only for configuration
Never include records that represent data.

Avoid the “Add to Update Set” UI Action for records
Even though it exists, it should not be used for data migration.

Use proper data migration strategies instead, such as:

  • Import Sets
  • Data sources
  • XML
Comments
lauri457
Tera Sage
 In reality, it introduces a high risk of data loss, especially when rollbacks are involved.

 

Outside of rolling back update sets what are the other risky scenarios?

 

I would also say that it is expected and desired for the records to be deleted as part of a rollback if they were moved downstream via update sets. I would assume they are somehow coupled to whatever else is in the set and is being backed out. 

Just for moving tickets or similar it does not make much sense to use them but why would anyone be backing out said update sets? Rogue developers and lack of governance sound like the actual issue

sarah_bioni
ServiceNow Employee

Hi @lauri457 ,

 

I agree with you, but unfortunately, this scenario is not uncommon. It's mainly a matter of governance.

 

Regards,

Sarah Bioni

salma98
Tera Contributor

totally agreed.The fact that while sys_update_xml can technically hold data, the platform's rollback logic treats it as a configuration element, which leads to those irreversible deletes.

Version history
Last update:
3 weeks ago
Updated by:
Contributors