---
sourceDocument: Australia Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/australia/platform-security

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Restrict permissions for CMDB model

# Restrict permissions for CMDB model {#ariaid-title1}

Release version: Australia  
Updated March 12, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Use the csm_cmdb_model.customer_visible_flag system property to
limit customer access to data in the Product Models table as an additional access control to the
CMDB model.
The csm_cmdb_model.customer_visible_flag system property is an additional access control to the CMDB model. If csm_cmdb_model.customer_visible_flag is not set to the recommended value of
true, then any user with the sn_esm_user role and out of the box ACLs will have permissions to the CMDB model. Note that this role tends to be granted to external users.

Ensure that the property csm_cmdb_model.customer_visible_flag is set to true.

## More information {#sc-restrict-permissions-cmdb-model__section_wc1_cqn_phc}

{#sc-restrict-permissions-cmdb-model__table_ajc_b43_3kb__entry__2}

| Attribute | Description |
|-|-|
| Configuration name | csm_cmdb_model.customer_visible_flag |
| Configuration type | System Properties (/sys_properties_list.do) |
| Data type | Boolean |
| Recommended value | true |
| Default value | \<none\> |
| Fallback value | false |
| Category | [Access control](https://www.servicenow.com/docs/UcoTP53NgzpgtyyAIm1CdQ "The access control category audits the process of protecting resources from unauthorized access through granting and denying requests based on a permission model. This includes ensuring an entity accessing a resource holds valid credentials to do so, creating and protecting a well-defined set of roles or permissions and ensuring role or permission controls are protected from replay and tampering.") |
| Security risk | * Severity score: 6.5 * CVSS rating: Medium * Security risk details: External users could unwillingly be given permissions to the CMDB model. {#sc-restrict-permissions-cmdb-model__ul_g1g_3sf_xwb} |
| Functional impact | None |
| Dependencies and prerequisites | None |
[ ]

{#sc-restrict-permissions-cmdb-model__table_ajc_b43_3kb}

To learn more about adding or creating a system
property, see [Add a system property](https://www.servicenow.com/docs/access?context=t_AddAPropertyUsingSysPropsList&version=australia&pubname=australia-platform-administration&ft:locale=en-US).