---
sourceDocument: Australia Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/australia/platform-security

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Honor admin override ACLs

# Honor admin override ACLs {#ariaid-title1}

Release version: Australia  
Updated August 3, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
The glide.security.admin.override.accessterm property controls whether an administrator can bypass an access rule when a resource (a table or a field) has multiple access rules.
Each individual access rule can be configured to allow or disallow an admin override on its own. When set to `true` (recommended), each rule's admin override setting is honored individually.
A rule explicitly  configured to disallow an admin override still blocks the administrator even if another rule on the same resource permits it.

When set to `false`, rules are evaluated cumulatively. An admin can bypass one rule's override restriction if any other applicable rule permits it.

Set the glide.security.admin.override.accessterm property to true to ensure that access rules explicitly configured to deny override still blocks admins.

## More information {#sc-honor-admin-override-acls__section_wc1_cqn_phc}

{#sc-honor-admin-override-acls__table_ajc_b43_3kb__entry__2}

| Attribute | Description |
|-|-|
| Configuration name | glide.security.admin.override.accessterm |
| Configuration type | System Properties (/sys_properties_list.do) |
| Data type | Boolean |
| Recommended value | true |
| Default value | \<none\> |
| Fallback value | true |
| Category | [Access control](https://www.servicenow.com/docs/UcoTP53NgzpgtyyAIm1CdQ "The access control category audits the process of protecting resources from unauthorized access through granting and denying requests based on a permission model. This includes ensuring an entity accessing a resource holds valid credentials to do so, creating and protecting a well-defined set of roles or permissions and ensuring role or permission controls are protected from replay and tampering.") |
| Security risk | * Severity score: 3.8 * CVSS rating: Low * Security risk details: If access checks are too coarse, one rule's override denial is silently ignored in favor of a more permissive rule on the same resource. This allows admins to read or modify data and configurations that  were intentionally locked down. Failure to enforce fine-grained evaluation of these override decisions may result in unauthorized access to sensitive information. {#sc-honor-admin-override-acls__ul_g1g_3sf_xwb} |
| Functional impact | When set to `true`, this property affects only admin access to resources with multiple access rules. Regular users and single-rule resources are unaffected.   Test that admins can't bypass override denials on a resource with multiple layered rules. Verify that if one rule denies admin override, that rule blocks the admin even if another rule permits override.  This change has no service availability impact. |
| Dependencies and prerequisites | None |
[ ]

{#sc-honor-admin-override-acls__table_ajc_b43_3kb}

To learn more about adding or creating a system
property, see [Add a system property](https://www.servicenow.com/docs/access?context=t_AddAPropertyUsingSysPropsList&version=australia&pubname=australia-platform-administration&ft:locale=en-US).

