Combined Access Management release notes for upgrades from Xanadu to Australia

  • Release version: Australia
  • Updated July 20, 2026
  • 6 minutes to read
    • Summarize
    Summarized using AI
    This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.

    Summary of Combined Access Management release notes for upgrades from Xanadu to Australia

    This consolidated guide provides a complete overview of the Access Management features, changes, and upgrade considerations from the Xanadu release through to Australia. It is designed to help ServiceNow customers prepare for and understand the enhancements and security improvements introduced across these releases in the Access Management product.

    Show full answer Show less

    Key Features Introduced Between Releases

    • Yokohama Release:
      • Security Data Filters: Enable control of sensitive data access by filtering queries before execution, preventing data leakage and restricting access to authorized users only.
      • Related Record Access: Enhances ACL framework by enforcing access permissions for related tables based on permissions of parent records, ensuring consistent and granular data security.
    • Zurich Release:
      • Machine Identity Access Controls: Fine-grained control over REST/SOAP endpoint data access for integrations, limiting exposure to necessary resources only.
      • Scripting Governance Tool: Enables governance of scripting privileges with a deny-by-default model, improving platform security by limiting who can write scripts.
      • Datatype ACLs: Simplifies ACL management by allowing a single ACL to secure all table columns of a specific data type, reducing redundant rules.
    • Australia Release (Early Availability):
      • Access Analyzer v6.1: A self-service tool for AI administrators to validate access controls within agentic workflows and AI agents, improving security on the AI platform.
      • Preconfigured Query ACLs: Automated loading of query ACLs for most platform plugins reduces manual configuration and enhances security risk mitigation.

    Notable Changes to Existing Features

    • Xanadu Release:
      • Deny-Unless Condition for ACLs: Introduces a new decision field for more granular access control by defining explicit conditions to allow or deny data access.
      • Enhanced ACL Security: Adds default deny behavior for misconfigured or empty ACLs, strengthening overall platform security.
      • ACL Query Behavior: New operators (query match and query range) allow fine-tuning of data querying rules under ACLs.
    • Australia Release:
      • Query ACLs now automatically load during plugin installation for most platform plugins, reducing manual steps and improving security.
      • Core field and datatype ACLs have been replaced with optimized rule types to decrease ACL volume and increase efficiency.
      • Existing custom query ACLs remain preserved but are loaded as inactive to maintain configuration integrity.

    Activation and Requirements

    Access Management is an AI Platform feature active by default in all releases from Xanadu through Australia, requiring no additional activation steps. No new browser, localization, or accessibility requirements have been introduced throughout these releases.

    Practical Impact for ServiceNow Customers

    • Improved data security through pre-query data filters and related record access ensures that sensitive information is only visible to authorized users.
    • Enhanced ACL decision-making and default deny behaviors reduce risk from misconfigurations by providing safer default access settings.
    • New governance tools for scripting and machine identity access help enforce stricter security policies and auditability on integrations and scripting capabilities.
    • Automation via preconfigured query ACLs and tools like Access Analyzer streamline security management and proactive risk mitigation, particularly in environments leveraging AI workflows.

    Upgrade Considerations

    Before upgrading to Australia, customers should review and complete any recommended pre- and post-upgrade tasks to ensure smooth transition and optimal security posture. No deprecated or removed Access Management features exist in this upgrade path, minimizing disruption.

    Consolidated page of all release notes for Access Management from Xanadu to Australia.

    How to use this page

    To help you prepare for your upgrade, we have combined the cross-family Access Management release notes onto one page. Read this summary of the new features, changes, and updated information for your product from Xanadu to Australia.

    Tip:
    If there were no updates for a release notes section in a certain family release, we included a short note for your reference. For example, if a product did not have any updates in Tokyo, the row says "No updates for this release."

    Important information for upgrading Access Management to Australia

    Before you upgrade to Australia, review these pre- and post-upgrade tasks and complete the tasks as needed.

    Release Release notes

    Xanadu

    		 No updates for this release.

    Yokohama

    		 No updates for this release.

    Zurich

    		 No updates for this release.

    Australia

    		 No updates for this release.

    New features

    Between your current release family and Australia, new features were introduced for Access Management.

    Release Release notes

    Xanadu

    		 No updates for this release.

    Yokohama
    Security data filters
    Security data Filters enable you to control who can access sensitive data by restricting access to authorized users, regardless of how the data is accessed. Security data filters are applied before query execution, ensuring restricted data never leaves the database and prevents data leakage at the query level. Filters integrate into queries for GlideRecordSecure, GlideRecordSandbox, and GlideAggregateSandbox by default.
    Related record access
    Related record access integrated into the ACL framework enhances access management by enabling administrators to enforce specific ACLs for related tables. This ensures users can only access records in related tables, such as costs, estimations, or tasks, based on their permissions for the parent table, like projects or cases. Combined with broader ACL capabilities, Related record access ensures consistent, granular, and enforceable

    Zurich
    Machine identity access controls
    Enforce fine-grained access to data via REST or SOAP endpoints using Machine Identity Access Controls. This feature enables you to define which integrations can access specific data, confirming that the integrations only have access to the resources they need.
    Scripting Governance Tool tool and role
    Review and help reduce the number of users with scripting privileges using the Scripting Governance Tool. This tool helps improve platform security with scripting governance based on user role.

    A new deny-by-default behavior is enforced for scripting unless you have the snc_required_script_writer_permission role. After an upgrade or zBoot, this role is automatically assigned via the Conditional Script Writer group.

    Datatype ACL
    Simplify and help reduce redundant ACL definitions with Datatype ACLs. Create a single ACL to target all table columns of a specific data type, streamlining access control configurations.

    Australia

    		 No updates for this release.

    Changes

    Between your current release family and Australia, some changes were made to existing Access Management features.

    Release Release notes

    Xanadu
    Deny-Unless condition for ACLs
    A new decision type field helps administrators define the conditions that give or deny users access to data. It enables more granular decision-making while defining the right access strategy on the platform.
    Enhanced ACL Security
    If an ACL is misconfigured or empty, you can deny access to data by default, enhancing the overall security of the platform.
    ACL Query Behavior
    Fine-tune your access control by dictating rules for querying data with the introduction of new operators: query match and query range.
    >Explicit Roles behavior adjustment
    When the system property glide.security.explicit_roles.do_not_fix is true, the snc_internal role is no longer added in memory or to the User Roles [sys_user_has_role] table.

    Yokohama

    		 No updates for this release.

    Zurich

    		 No updates for this release.

    Australia
    Early Availability
    Query ACLs
    Query ACLs now load automatically during plugin installation for most platform plugins. These preconfigured ACLs reduce the need to run the QueryRangeACLAuditor tool to generate query ACLs. Store app query ACLs aren't included in preconfigured query ACLs. For more information about preconfigured query ACLs, see the Maintenance Information [KB2046494] article in the Now Support Knowledge Base.
    Existing custom query ACLs are preserved and loaded as inactive. To view inactive ACLs, use this command: <INSTANCE_URL>/sys_security_acl_list.do?[query_parameters]
    QueryRangeACLAuditor tool modifications are preserved.
    ACL rule types
    Core field and datatype ACLs are replaced with more comprehensive rules to optimize ACL volume.
    Access Analyzer
    Use ServiceNow® Access Analyzer v6.1, a tool designed for AI administrators or creators to validate the access controls configured within agentic assets (agentic workflows and AI agents) on the ServiceNow AI Platform.
    Important:
    Access Analyzer is available in the ServiceNow Store. For more information, visit ServiceNow Store.

    Removed

    Between your current release family and Australia, some Access Management features or functionality were removed.

    Release Release notes

    Xanadu

    		 No updates for this release.

    Yokohama

    		 No updates for this release.

    Zurich

    		 No updates for this release.

    Australia

    		 No updates for this release.

    Deprecations

    Between your current release family and Australia, some Access Management features or functionality were deprecated.

    Release Release notes

    Xanadu

    		 No updates for this release.

    Yokohama

    		 No updates for this release.

    Zurich

    		 No updates for this release.

    Australia

    		 No updates for this release.

    Activation information

    Review information on how to activate Access Management.

    Release Release notes

    Xanadu

    Access Management is a ServiceNow AI Platform feature that is active by default.

    Yokohama

    Access Management is a ServiceNow AI Platform feature that is active by default.

    Zurich

    Access Management is a ServiceNow AI Platform feature that is active by default.

    Australia

    Access Management is a ServiceNow AI Platform feature that is active by default.

    Additional requirements

    If any additional requirements were introduced or changed for Access Management we have noted them here.

    Release Release notes

    Xanadu

    		 No updates for this release.

    Yokohama

    		 No updates for this release.

    Zurich

    		 No updates for this release.

    Australia

    		 No updates for this release.

    Browser requirements

    If any specific browser requirements were introduced or changed for Access Management we have noted them here.

    Release Release notes

    Xanadu

    		 No updates for this release.

    Yokohama

    		 No updates for this release.

    Zurich

    		 No updates for this release.

    Australia

    		 No updates for this release.

    Accessibility information

    Review details on accessibility information for Access Management, such as specific requirements or compliance levels.

    Release Release notes

    Xanadu

    		 No updates for this release.

    Yokohama

    		 No updates for this release.

    Zurich

    		 No updates for this release.

    Australia

    		 No updates for this release.

    Localization information

    If there are specific localization considerations for Access Management we have noted them here.

    Release Release notes

    Xanadu

    		 No updates for this release.

    Yokohama

    		 No updates for this release.

    Zurich

    		 No updates for this release.

    Australia

    		 No updates for this release.

    Highlight information

    If there are specific highlight considerations for Access Management we have noted them here.

    Release Release notes

    Xanadu
    • Fine-tune your access control with the new Deny-Unless ACL and query operators.
    • Enhance ACL security with a new default denial behavior.
    • Identify and fix empty or misconfigured ACLs with new ACL creation rules.

    See Access Control List Rules for more information.

    Yokohama
    • Security Data Filters are a powerful new feature designed to restrict access to sensitive records based on roles or security attributes. This ensures only authorized users can view data, regardless of how the data is accessed.
    • Related Record Access allows enforcement of consistent access rules across related tables, ensuring that users only see records associated with the data they are authorized to access.

    See Access Control List Rules for more information.

    Zurich
    • Enforce access to data via REST or SOAP endpoints using the Machine Identity Access Controls, which helps improve security, governance, and auditability.
    • Target all table columns of a given data type with a single ACL using Datatype ACLs.
    • Govern scripting permissions with the Scripting Governance tool, a new base system deny-by-default behavior.

    See Access Control List Rules for more information.

    Australia
    Early Availability
    • Use ServiceNow® Access Analyzer v6.1, a self-service tool designed for AI administrators or creators to validate the access controls configured within agentic assets (agentic workflows and AI agents).
    • Use new preconfigured query ACLs for most platform plugins, as part of ongoing security risk mitigation. These base system ACLs significantly reduce the need to run the QueryRangeACLAuditor tool.
    • Use Access Findings, the proactive detection and remediation layer within Access Management Console, to run eight base system access checks against your instance on a daily schedule. This surfaces prioritized findings when misconfigurations are detected, and provides a complete remediation workflow including AI-powered guidance.

    See Access Control List Rules for more information.