Clarification on when Protection Policies apply — only to Script Includes or also in other cases?

[sndevastik]

Hi Community,

I just wanted to clarify something regarding Protection Policies in ServiceNow.
Are they applicable only to Script Includes, and only when an application is downloaded from the ServiceNow Store?

Any insights or examples would be really helpful. Thanks in advance!

[vignesh parthib · Accepted solution]

Hi @sndevastik 

Protection Policy applicable to  script Includes, Business Rules , UI Actions, Scripted REST APIs , UI Policies / UI Policy Scripts , Client Scripts , Flow Designer Actions and etc.,

https://www.servicenow.com/docs/bundle/zurich-application-development/page/build/applications/concep...

When Protection Policies Apply?  Installed from the ServiceNow Store and not applicable for custom App Built in Studio on your own instance 

Example:

Let’s say you build a scoped app with a Script Include:

• Set the Protection Policy = Protected.

• Upload the app to the ServiceNow Store.

• A customer installs it via the Store.

• Result: That Script Include is not viewable or editable in the customer’s instance — even by admins.

If they export your app via update set, or clone it manually, the protection is not enforced.

Thanks,
Vignesh
"If this solution resolves your issue, kindly mark it as correct."

[vignesh parthib · Accepted solution]

Hi @sndevastik 

Protection Policy applicable to  script Includes, Business Rules , UI Actions, Scripted REST APIs , UI Policies / UI Policy Scripts , Client Scripts , Flow Designer Actions and etc.,

https://www.servicenow.com/docs/bundle/zurich-application-development/page/build/applications/concep...

When Protection Policies Apply?  Installed from the ServiceNow Store and not applicable for custom App Built in Studio on your own instance 

Example:

Let’s say you build a scoped app with a Script Include:

• Set the Protection Policy = Protected.

• Upload the app to the ServiceNow Store.

• A customer installs it via the Store.

• Result: That Script Include is not viewable or editable in the customer’s instance — even by admins.

If they export your app via update set, or clone it manually, the protection is not enforced.

Thanks,
Vignesh
"If this solution resolves your issue, kindly mark it as correct."

[kaushal_snow · Accepted solution]

@sndevastik ,

Protection Policies in ServiceNow are applicable to various script record types, including Script Includes, Business Rules, UI Actions, Scripted REST APIs, UI Policies/UI Policy Scripts, Client Scripts, and Flow Designer Actions.

However, these policies are only enforced when the application is installed from the ServiceNow Store. If the application is exported via an update set or cloned manually, the protection is not applied. Therefore, while Protection Policies can be set on Script Includes and other script records, their enforcement depends on how the application is deployed.....

If you found my response helpful, please mark it as ‘Accept as Solution’ and ‘Helpful’. This helps other community members find the right answer more easily and supports the community.