ServiceNow ACL Admin Overrides – A Hidden Gotcha! 🔐🚀

Tarun9
Tera Contributor

Recently, encountered an unexpected issue where the Admin Override feature in an ACL wasn’t working as expected. Even though an admin should have had access, the restriction still applied. 

After digging deeper, I discovered an important detail:  

 

 If multiple ACLs exist on a field and even one has "Admin Overrides" set to false, then admin users lose their override ability for all ACLs on that field. 

 

This behavior is controlled by a system property introduced in Geneva & later releases:  

 

🛠 Fixing the Issue:

1️⃣ Navigate to System Properties (sys_properties)

2️⃣ Look for glide.security.admin.override.accesssterm  

3️⃣ If it doesn’t exist, create it with:  

  - Type: true | false  

  - Value: true  

  - Description: When set to true, it evaluates the admin overridable condition at the access term level. 

4️⃣ If it exists but is false, update it to true.  

 

Outcome

Ensures ACLs respect Admin Overrides at the access level rather than being blocked by one restrictive ACL.  

 

1 REPLY 1

luffy3478
Tera Guru

This is the instance's default behavior, implemented for enhanced security. It's recommended to not make this change