--- sourceDocument: brazil Combined Product Files sourceDocumentLink: https://www.servicenow.com/docs/r/delta-zurich-brazil Release : - brazil ft:locale : - en-US ft:publication_title : - brazil Combined Product Files ft:clusterId : - delta3bz bundleId : - delta3bz --- # Combined Access Management release notes for upgrades from Zurich to Brazil # Combined Access Management release notes for upgrades from Zurich to Brazil {#ariaid-title1} Release version: Brazil Updated October 8, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 5 minutes to read Summarize ![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete. ## Summary of Combined Access Management Release Notes for Upgrades from Zurich to Brazil This consolidated guide assists ServiceNow customers in preparing for upgrades of Access Management from the Zurich to Brazil release. It summarizes new features, changes, removals, and important upgrade considerations across these versions, enabling customers to understand how Access Management capabilities evolve and how to apply them effectively in their environments. Show full answer Show less ## New Features * **Machine Identity Access Controls (Zurich):** Enables fine-grained access enforcement for REST and SOAP endpoints, allowing customers to restrict integration access strictly to necessary resources, enhancing security and governance. * **Scripting Governance Tool and Role (Zurich):** Introduces a deny-by-default scripting permission model to improve platform security by limiting scripting privileges to users with the specific role `sncrequiredscriptwriterpermission`. This role is auto-assigned post-upgrade. * **Datatype ACLs (Zurich):** Simplifies access control by allowing a single ACL to manage permissions for all table columns of a specific data type, reducing redundant ACL definitions and streamlining configuration. ## Changes * **Query ACLs (Australia):** Preconfigured query ACLs now load automatically with most platform plugins, minimizing the need to run the QueryRangeACLAuditor tool. Existing custom query ACLs are preserved but set inactive by default. * **ACL Types Optimization (Australia):** Core field and datatype ACLs have been replaced with more comprehensive rules to decrease ACL volume and improve performance. * **Access Control List Enforcement (Brazil):** New strict denial behavior is enforced when ACLs reference roles that do not exist on the instance, improving access control predictability. This is default for new instances; existing instances can enable it via a system property. ## Removed and Deprecated Features No Access Management features or functionalities were removed or deprecated between Zurich and Brazil releases. ## Activation Information Access Management is active by default in Zurich, Australia, and Brazil releases as a core ServiceNow AI Platform feature, requiring no additional activation steps post-upgrade. ## Accessibility and Localization * **Brazil Accessibility:** Introduces the Coral theme as the default for new portals, web, and mobile experiences with Next Experience or Core UI. This theme features brand-neutral illustrations and includes a dark theme option for enhanced user experience. * No localization changes were noted for this release. ## Additional Highlights * **Access Analyzer (Australia and Brazil):** Provides self-service validation tools for access controls on agentic assets, supporting administrators in verifying security configurations. * **Access Findings (Australia and Brazil):** Offers a proactive detection and remediation system within the Access Management Console that runs base system access checks daily and provides AI-guided remediation workflows. * **Zero Trust Access (Brazil):** Encourages least privilege access models and enhanced security posture by validating access controls systematically. * **Customer Service Access Controls (Brazil):** Enables control over which Customer Service and Support employees can access the instance and under what conditions, via the SNC Access Control plugin. ## Pre- and Post-Upgrade Recommendations Before upgrading to Brazil, review and complete any necessary pre- and post-upgrade tasks related to Access Management to ensure a smooth transition and maintain security integrity. This combined information empowers ServiceNow customers to leverage enhanced security controls, governance, and simplified configuration introduced from Zurich through Brazil, improving their overall access management strategy. Consolidated page of all release notes for Access Management from Zurich to Brazil. ## How to use this page To help you prepare for your upgrade, we have combined the cross-family Access Management release notes onto one page. Read this summary of the new features, changes, and updated information for your product from Zurich to Brazil. Tip: If there were no updates for a release notes section in a certain family release, we included a short note for your reference. For example, if a product did not have any updates in Tokyo, the row says "No updates for this release." ## Important information for upgrading Access Management to Brazil Before you upgrade to Brazil, review these pre- and post-upgrade tasks and complete the tasks as needed. {#dfrn3-accessmanagement-summary__entry__2} | Release | Release notes | |-|-| | Zurich | No updates for this release. | | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## New features Between your current release family and Brazil, new features were introduced for Access Management. {#dfrn3-accessmanagement-summary__entry__10} | Release | Release notes | |-|-| | Zurich | [Machine identity access controls](https://www.servicenow.com/docs/access?context=machine-identity-access-controls&family=zurich&ft:locale=en-US) : Enforce fine-grained access to data via REST or SOAP endpoints using Machine Identity Access Controls. This feature enables you to define which integrations can access specific data, confirming that the integrations only have access to the resources they need. [Scripting Governance Tool](https://www.servicenow.com/docs/access?context=scripting-governance&family=zurich&ft:locale=en-US) tool and role : Review and help reduce the number of users with scripting privileges using the Scripting Governance Tool. This tool helps improve platform security with scripting governance based on user role.A new deny-by-default behavior is enforced for scripting unless you have the snc_required_script_writer_permission role. After an upgrade or zBoot, this role is automatically assigned via the Conditional Script Writer group. [Datatype ACL](https://www.servicenow.com/docs/access?context=datatype-acl&family=zurich&ft:locale=en-US) : Simplify and help reduce redundant ACL definitions with Datatype ACLs. Create a single ACL to target all table columns of a specific data type, streamlining access control configurations. | | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Changes Between your current release family and Brazil, some changes were made to existing Access Management features. {#dfrn3-accessmanagement-summary__entry__18} | Release | Release notes | |-|-| | Zurich | No updates for this release. | | Australia | [Query ACLs](https://www.servicenow.com/docs/access?context=query-acl-rule&family=australia&ft:locale=en-US) : Query ACLs now load automatically during plugin installation for most platform plugins. These preconfigured ACLs reduce the need to run the QueryRangeACLAuditor tool to generate query ACLs. Store app query ACLs aren't included in preconfigured query ACLs. For more information about preconfigured query ACLs, see the [Maintenance Information \[KB2046494\]](https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB2046494) article in the Now Support Knowledge Base.Existing custom query ACLs are preserved and loaded as inactive. To view inactive ACLs, use this command: `/sys_security_acl_list.do?[query_parameters]`QueryRangeACLAuditor tool modifications are preserved. [ACL types](https://www.servicenow.com/docs/access?context=acl-rule-types&family=australia&ft:locale=en-US) : Core field and datatype ACLs are replaced with more comprehensive rules to optimize ACL volume. | | Brazil | [Explore Access Control Lists](https://www.servicenow.com/docs/access?context=exploring-access-control-list&family=brazil&ft:locale=en-US) : Improve access control predictability by enforcing strict denial when none of the referenced roles referenced in an ACL exist on the instance. This behavior doesn't apply to ACLs that have a mix of valid and invalid roles. This behavior is on by default for new instances. If you upgraded to this release, use the glide.security.acl_with_invalid_roles_strict_deny property to turn it on. Navigate to AllAccess ManagementAccess Findings to find these ACLs in the Access Checks list. | [ ] ## Removed Between your current release family and Brazil, some Access Management features or functionality were removed. {#dfrn3-accessmanagement-summary__entry__26} | Release | Release notes | |-|-| | Zurich | No updates for this release. | | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Deprecations Between your current release family and Brazil, some Access Management features or functionality were deprecated. {#dfrn3-accessmanagement-summary__entry__34} | Release | Release notes | |-|-| | Zurich | No updates for this release. | | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Activation information Review information on how to activate Access Management. {#dfrn3-accessmanagement-summary__entry__42} | Release | Release notes | |-|-| | Zurich | Activation information : Access Management is a ServiceNow AI Platform feature that is active by default. | | Australia | Activation information : Access Management is a ServiceNow AI Platform feature that is active by default. | | Brazil | Activation information : Access Management is a ServiceNow AI Platform feature that is active by default. | [ ] ## Additional requirements If any additional requirements were introduced or changed for Access Management we have noted them here. {#dfrn3-accessmanagement-summary__entry__50} | Release | Release notes | |-|-| | Zurich | No updates for this release. | | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Browser requirements If any specific browser requirements were introduced or changed for Access Management we have noted them here. {#dfrn3-accessmanagement-summary__entry__58} | Release | Release notes | |-|-| | Zurich | No updates for this release. | | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Accessibility information Review details on accessibility information for Access Management, such as specific requirements or compliance levels. {#dfrn3-accessmanagement-summary__entry__66} | Release | Release notes | |-|-| | Zurich | No updates for this release. | | Australia | No updates for this release. | | Brazil | Accessibility information : Coral is the default theme for new portal, web, and mobile experiences with Next Experience or Core UI enabled. This theme uses brand-neutral illustrations. A dark theme option is available for web and mobile experiences. | [ ] ## Localization information If there are specific localization considerations for Access Management we have noted them here. {#dfrn3-accessmanagement-summary__entry__74} | Release | Release notes | |-|-| | Zurich | No updates for this release. | | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Highlight information If there are specific highlight considerations for Access Management we have noted them here. {#dfrn3-accessmanagement-summary__entry__82} | Release | Release notes | |-|-| | Zurich | * Enforce access to data via REST or SOAP endpoints using the Machine Identity Access Controls, which helps improve security, governance, and auditability. * Target all table columns of a given data type with a single ACL using Datatype ACLs. * Govern scripting permissions with the Scripting Governance tool, a new base system deny-by-default behavior. See [Access Control List Rules](https://www.servicenow.com/docs/access?context=access-control-rules&family=zurich&ft:locale=en-US) for more information. | | Australia | Early Availability * Use ServiceNow® Access Analyzer v6.1, a self-service tool designed for AI administrators or creators to validate the access controls configured within agentic assets (agentic workflows and AI agents). * Use new preconfigured query ACLs for most platform plugins, as part of ongoing security risk mitigation. These base system ACLs significantly reduce the need to run the QueryRangeACLAuditor tool. * Use Access Findings, the proactive detection and remediation layer within Access Management Console, to run eight base system access checks against your instance on a daily schedule. This surfaces prioritized findings when misconfigurations are detected, and provides a complete remediation workflow including AI-powered guidance. See [Access Control Lists (ACLs)](https://www.servicenow.com/docs/access?context=access-control-rules&family=australia&ft:locale=en-US) for more information. | | Brazil | * Validate access controls configured within various resources and agentic assets with Access Analyzer. * Improve your security posture by ensuring that access to applications and data is granted on a least privilege basis with Zero Trust Access. * Use Access Findings, the proactive detection and remediation layer within Access Management Console, to run base system access checks against your instance on a daily schedule. * Restrict access to data by requiring users to pass a set of requirements before they can interact with it by using ACLs. * Control which Customer Service and Support employees can access your instance, and when, using the SNC Access Control plugin (com.snc.snc_access_control). See [Access Management](https://www.servicenow.com/docs/access?context=access-management-landing&family=brazil&ft:locale=en-US) for more information. | [ ] *[\>]: and then