ServiceNow ACL Admin Overrides – A Hidden Gotcha! 🔐🚀
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-28-2025 09:49 AM
Recently, encountered an unexpected issue where the Admin Override feature in an ACL wasn’t working as expected. Even though an admin should have had access, the restriction still applied.
After digging deeper, I discovered an important detail:
If multiple ACLs exist on a field and even one has "Admin Overrides" set to false, then admin users lose their override ability for all ACLs on that field.
This behavior is controlled by a system property introduced in Geneva & later releases:
🛠 Fixing the Issue:
1️⃣ Navigate to System Properties (sys_properties)
2️⃣ Look for glide.security.admin.override.accesssterm
3️⃣ If it doesn’t exist, create it with:
- Type: true | false
- Value: true
- Description: When set to true, it evaluates the admin overridable condition at the access term level.
4️⃣ If it exists but is false, update it to true.
Outcome:
Ensures ACLs respect Admin Overrides at the access level rather than being blocked by one restrictive ACL.
- 513 Views
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-30-2025 11:02 PM
This is the instance's default behavior, implemented for enhanced security. It's recommended to not make this change