Securing system properties

ericgilmore · ‎12-06-2023

I've been asked to only allow Security Admins to have access to System Properties.
I've been asked to encrypt certain System Properties.

Has anyone else done these things?

Where can I find a good recipe for such actions?

Is this a good idea?

Is there already a provision ServiceNow has to do these types of actions to System Properties?

-thanks for your help

ericgilmore · ‎12-06-2023

Well that escalated quickly. What I've learned about System Properties, in my instance at least:

system properties are only accessible by those with the "admin" role.
system properties also appear to be accessible by app admins as well, i.e. those with knowledge_admin role can see system properties associated with Knowledge.
system properties allow for the explicit setting of Read or Write roles, which allow the admin to open certain properties to others, or to remove read/write access for others.
if a system property is set as type "Password", the value will be encrypted.

This is pretty much all I needed to know.

Hope this helps others.

ericgilmore · ‎12-06-2023

Links that gave me a little insight;