--- sourceDocument: australia Combined Product Files sourceDocumentLink: https://www.servicenow.com/docs/r/australia/delta-zurich-australia Release : - australia ft:locale : - en-US ft:publication_title : - australia Combined Product Files ft:clusterId : - delta3az bundleId : - delta3az --- # Combined Access Management release notes for upgrades from Zurich to Australia # Combined Access Management release notes for upgrades from Zurich to Australia {#ariaid-title1} Release version: Australia Updated October 8, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 4 minutes to read Summarize ![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete. ## Summary of Combined Access Management Release Notes for Upgrades from Zurich to Australia This consolidated release notes document provides ServiceNow customers with essential information on upgrading Access Management from the Zurich release to the Australia release. It summarizes new features, changes, deprecations, and activation details specifically relevant to Access Management, facilitating a smooth upgrade process and enhanced security governance. Show full answer Show less ## New Features * **Machine Identity Access Controls (Zurich):** Enables fine-grained enforcement of access to data via REST or SOAP endpoints by defining which integrations can access specific resources, improving security and governance. * **Scripting Governance Tool (Zurich):** Introduces governance for scripting privileges with a deny-by-default behavior unless a user has the *sncrequiredscriptwriterpermission* role, which is assigned automatically after an upgrade or system boot. * **Datatype ACLs (Zurich):** Simplify access control by creating a single ACL that targets all table columns of a specific data type, reducing redundant ACL definitions and streamlining configurations. * **Access Analyzer v6.1 (Australia early availability):** A self-service tool for AI administrators and creators to validate access controls within agentic assets such as workflows and AI agents. * **Access Findings (Australia):** A proactive detection and remediation feature within the Access Management Console that runs daily base system access checks, surfaces prioritized findings, and provides AI-powered remediation guidance. ## Changes * **Query ACLs (Australia):** Query ACLs now load automatically with most platform plugin installations, reducing the need to run the QueryRangeACLAuditor tool. Existing custom query ACLs are preserved but set inactive by default. * **ACL Types (Australia):** Core field and datatype ACLs are replaced with more comprehensive rules to optimize the volume of ACLs, enhancing overall security management. ## Activation and Additional Information * Access Management is an AI Platform feature that is active by default in both Zurich and Australia releases, requiring no manual activation. * No additional requirements, browser requirements, localization changes, or accessibility updates were introduced between Zurich and Australia for Access Management. ## Why This Matters to ServiceNow Customers Upgrading to Australia enhances your platform's security posture by introducing advanced access controls, governance tools, and automation for detecting and remediating access risks. The new Machine Identity Access Controls and Datatype ACLs simplify and strengthen access policies, while the Scripting Governance Tool helps reduce risks associated with scripting privileges. Automated query ACL management and Access Findings provide ongoing security improvements with less manual effort. ## Next Steps for Customers * Review and complete all pre- and post-upgrade tasks to ensure a smooth transition to Australia. * Leverage the new Machine Identity Access Controls and Datatype ACLs to refine your access policies. * Utilize the Scripting Governance Tool to audit and manage scripting permissions securely. * Adopt Access Analyzer and Access Findings to proactively monitor and remediate access configuration issues. * Familiarize yourself with the new preconfigured query ACLs and understand how existing ACLs are handled post-upgrade. Consolidated page of all release notes for Access Management from Zurich to Australia. ## How to use this page To help you prepare for your upgrade, we have combined the cross-family Access Management release notes onto one page. Read this summary of the new features, changes, and updated information for your product from Zurich to Australia. Tip: If there were no updates for a release notes section in a certain family release, we included a short note for your reference. For example, if a product did not have any updates in Tokyo, the row says "No updates for this release." ## Important information for upgrading Access Management to Australia Before you upgrade to Australia, review these pre- and post-upgrade tasks and complete the tasks as needed. {#dfrn3-accessmanagement-summary__entry__2} | Release | Release notes | |-|-| | Zurich | No updates for this release. | | Australia | No updates for this release. | [ ] ## New features Between your current release family and Australia, new features were introduced for Access Management. {#dfrn3-accessmanagement-summary__entry__8} | Release | Release notes | |-|-| | Zurich | [Machine identity access controls](https://www.servicenow.com/docs/access?context=machine-identity-access-controls&family=zurich&ft:locale=en-US) : Enforce fine-grained access to data via REST or SOAP endpoints using Machine Identity Access Controls. This feature enables you to define which integrations can access specific data, confirming that the integrations only have access to the resources they need. [Scripting Governance Tool](https://www.servicenow.com/docs/access?context=scripting-governance&family=zurich&ft:locale=en-US) tool and role : Review and help reduce the number of users with scripting privileges using the Scripting Governance Tool. This tool helps improve platform security with scripting governance based on user role.A new deny-by-default behavior is enforced for scripting unless you have the snc_required_script_writer_permission role. After an upgrade or zBoot, this role is automatically assigned via the Conditional Script Writer group. [Datatype ACL](https://www.servicenow.com/docs/access?context=datatype-acl&family=zurich&ft:locale=en-US) : Simplify and help reduce redundant ACL definitions with Datatype ACLs. Create a single ACL to target all table columns of a specific data type, streamlining access control configurations. | | Australia | No updates for this release. | [ ] ## Changes Between your current release family and Australia, some changes were made to existing Access Management features. {#dfrn3-accessmanagement-summary__entry__14} | Release | Release notes | |-|-| | Zurich | No updates for this release. | | Australia | [Query ACLs](https://www.servicenow.com/docs/access?context=query-acl-rule&family=australia&ft:locale=en-US) : Query ACLs now load automatically during plugin installation for most platform plugins. These preconfigured ACLs reduce the need to run the QueryRangeACLAuditor tool to generate query ACLs. Store app query ACLs aren't included in preconfigured query ACLs. For more information about preconfigured query ACLs, see the [Maintenance Information \[KB2046494\]](https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB2046494) article in the Now Support Knowledge Base.Existing custom query ACLs are preserved and loaded as inactive. To view inactive ACLs, use this command: `/sys_security_acl_list.do?[query_parameters]`QueryRangeACLAuditor tool modifications are preserved. [ACL types](https://www.servicenow.com/docs/access?context=acl-rule-types&family=australia&ft:locale=en-US) : Core field and datatype ACLs are replaced with more comprehensive rules to optimize ACL volume. | [ ] ## Removed Between your current release family and Australia, some Access Management features or functionality were removed. {#dfrn3-accessmanagement-summary__entry__20} | Release | Release notes | |-|-| | Zurich | No updates for this release. | | Australia | No updates for this release. | [ ] ## Deprecations Between your current release family and Australia, some Access Management features or functionality were deprecated. {#dfrn3-accessmanagement-summary__entry__26} | Release | Release notes | |-|-| | Zurich | No updates for this release. | | Australia | No updates for this release. | [ ] ## Activation information Review information on how to activate Access Management. {#dfrn3-accessmanagement-summary__entry__32} | Release | Release notes | |-|-| | Zurich | Activation information : Access Management is a ServiceNow AI Platform feature that is active by default. | | Australia | Activation information : Access Management is a ServiceNow AI Platform feature that is active by default. | [ ] ## Additional requirements If any additional requirements were introduced or changed for Access Management we have noted them here. {#dfrn3-accessmanagement-summary__entry__38} | Release | Release notes | |-|-| | Zurich | No updates for this release. | | Australia | No updates for this release. | [ ] ## Browser requirements If any specific browser requirements were introduced or changed for Access Management we have noted them here. {#dfrn3-accessmanagement-summary__entry__44} | Release | Release notes | |-|-| | Zurich | No updates for this release. | | Australia | No updates for this release. | [ ] ## Accessibility information Review details on accessibility information for Access Management, such as specific requirements or compliance levels. {#dfrn3-accessmanagement-summary__entry__50} | Release | Release notes | |-|-| | Zurich | No updates for this release. | | Australia | No updates for this release. | [ ] ## Localization information If there are specific localization considerations for Access Management we have noted them here. {#dfrn3-accessmanagement-summary__entry__56} | Release | Release notes | |-|-| | Zurich | No updates for this release. | | Australia | No updates for this release. | [ ] ## Highlight information If there are specific highlight considerations for Access Management we have noted them here. {#dfrn3-accessmanagement-summary__entry__62} | Release | Release notes | |-|-| | Zurich | * Enforce access to data via REST or SOAP endpoints using the Machine Identity Access Controls, which helps improve security, governance, and auditability. * Target all table columns of a given data type with a single ACL using Datatype ACLs. * Govern scripting permissions with the Scripting Governance tool, a new base system deny-by-default behavior. See [Access Control List Rules](https://www.servicenow.com/docs/access?context=access-control-rules&family=zurich&ft:locale=en-US) for more information. | | Australia | Early Availability * Use ServiceNow® Access Analyzer v6.1, a self-service tool designed for AI administrators or creators to validate the access controls configured within agentic assets (agentic workflows and AI agents). * Use new preconfigured query ACLs for most platform plugins, as part of ongoing security risk mitigation. These base system ACLs significantly reduce the need to run the QueryRangeACLAuditor tool. * Use Access Findings, the proactive detection and remediation layer within Access Management Console, to run eight base system access checks against your instance on a daily schedule. This surfaces prioritized findings when misconfigurations are detected, and provides a complete remediation workflow including AI-powered guidance. See [Access Control Lists (ACLs)](https://www.servicenow.com/docs/access?context=access-control-rules&family=australia&ft:locale=en-US) for more information. | [ ]