--- sourceDocument: brazil Combined Product Files sourceDocumentLink: https://www.servicenow.com/docs/r/delta-zurich-brazil Release : - brazil ft:locale : - en-US ft:publication_title : - brazil Combined Product Files ft:clusterId : - delta3bz bundleId : - delta3bz --- # Combined Common Core release notes for upgrades from Zurich to Brazil # Combined Common Core release notes for upgrades from Zurich to Brazil {#ariaid-title1} Release version: Brazil Updated October 8, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 8 minutes to read Summarize ![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete. ## Summary of Combined Common Core release notes for upgrades from Zurich to Brazil This consolidated release note page is designed to help ServiceNow customers prepare for upgrading Common Core from the Zurich release family through to Brazil. It summarizes new features, changes, and relevant upgrade tasks spanning these releases. No updates were made specifically for Australia or Brazil releases within this timeframe. Customers can use this information to understand enhancements and streamline their upgrade process. Show full answer Show less ## Key Features * **Report a GRC issue AI Agent:** Available in the Employee Center, this AI-driven conversational agent guides employees in reporting GRC issues, structuring input, and recommending relevant controls and policies to ensure well-defined submissions. * **Entity-based Record Access Rules:** Enhanced to maintain seamless access for users and groups referenced in record fields, reducing administrative overhead and enabling smoother adoption of entity-based access (EBA) with minimal disruption. * **Functional Domain Bulk Update:** Allows bulk application or removal of domain-specific tags across multiple records, simplifying workspace management and enabling focused views such as filtering by privacy tags. * **Entity Record Page Enhancements:** The Entity and Downstream Risks (now called Risks) related lists have been modernized with UIB pages offering a more intuitive interface and organized risk tabs. Guidance is provided to address potential custom action issues. * **My Tasks Workspace Configuration:** Administrators can control the visibility of task configurations using Active/Inactive flags, improving management flexibility without manual intervention. * **Entity Name Synchronization:** Entity names in GRC now automatically update to reflect changes in associated Configuration Item (CI) names, enhancing data consistency and reducing manual synchronization effort. * **Model Text Protocol (MCP) Client:** Enables integration of external tools published via MCP Server into ServiceNow AI Agent Studio, with user authentication managed through MCP Server. * **AI Agent Creation and Access Control:** The AI agent creation interface now offers multiple agent types via a dropdown, and administrators can configure Access Control Lists (ACLs) to define who can discover and trigger AI agents or agentic workflows, including options for dynamic or AI user behavior and public or restricted access. * **Entity-based Record Access Update Utility:** Provides a guided, four-step process for applying EBA restrictions at the record level, including defining scope, scoping record types, applying conditions, reviewing records, and monitoring execution logs with detailed impact insights. * **Automatic Access Restriction for New/Modified Records:** Entity-based access rules now secure new or modified records automatically, ensuring consistent application of access restrictions. * **Deactivation of Entity-based Access Configurations:** Allows administrators to deactivate EBA configurations safely, with the system automatically adjusting access restrictions without affecting unrelated configurations. ## Key Changes * **Downstream Risks Renamed:** The Downstream Risks related list is renamed to "Risks" with an improved tabbed interface categorizing risks by direct relation, suggestions, and all risks. * **Coral Theme:** Introduced as the default theme for Vendor Management Workspace, portals, and mobile experiences, with a dark theme option to improve accessibility and reduce eye strain. * **Record Access Update Utility Preview State:** A new Preview state allows administrators to review the estimated number of impacted records before applying access restrictions, enhancing control and reducing risk of unintended changes. ## Activation and Additional Information * Integrated Risk Management (IRM) and ServiceNow Otto for IRM apps should be requested via the ServiceNow Store to enable Common Core capabilities. * There are no new browser, localization, or additional technical requirements introduced in these releases. * Accessibility improvements include the dark theme option within the new Coral theme to support visual comfort and readability. ## Practical Implications for ServiceNow Customers ServiceNow customers upgrading Common Core from Zurich through Brazil can expect enhanced AI-powered GRC issue reporting, improved and automated entity-based access control, streamlined workspace management, and updated user interfaces for risk management. These improvements reduce manual tasks, improve data consistency, and increase ease of administration. The new guided utilities and preview features help ensure precise control over access restrictions and minimize upgrade risks. Activation requires requesting specific IRM applications from the ServiceNow Store. Consolidated page of all release notes for Common Core from Zurich to Brazil. ## How to use this page To help you prepare for your upgrade, we have combined the cross-family Common Core release notes onto one page. Read this summary of the new features, changes, and updated information for your product from Zurich to Brazil. Tip: If there were no updates for a release notes section in a certain family release, we included a short note for your reference. For example, if a product did not have any updates in Tokyo, the row says "No updates for this release." ## Important information for upgrading Common Core to Brazil Before you upgrade to Brazil, review these pre- and post-upgrade tasks and complete the tasks as needed. {#dfrn3-commoncore-summary__entry__2} | Release | Release notes | |-|-| | Zurich | No updates for this release. | | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## New features Between your current release family and Brazil, new features were introduced for Common Core. {#dfrn3-commoncore-summary__entry__10} | Release | Release notes | |-|-| | Zurich | [Report a GRC issue](https://www.servicenow.com/docs/access?context=report-a-grc-issue&family=zurich&ft:locale=en-US) : The report a GRC issue AI agent is now available in the Employee Center, enabling employee users to report issues through a guided conversational experience. As users respond to prompts, the agent structures the issue and recommends relevant controls, entities, and policies based on the input provided. The AI agent helps ensure that the issue is well-defined and enriched with contextual information before it's submitted. [Entity-based record access rules](https://www.servicenow.com/docs/access?context=continuous-monitoring-of-entity-based-access&family=zurich&ft:locale=en-US) : Maintain seamless access for users and groups referenced in record fields when entity-based access restrictions are applied. This feature enables users and groups referenced in a record's user or group fields to access the records they are associated with. By configuring record-level user access at the table or record type level, it reduces administrative overhead and streamlines EBA adoption with minimal disruption. [Functional domain bulk update](https://www.servicenow.com/docs/access?context=functional-domain-bulk-update&family=zurich&ft:locale=en-US) : Apply or remove domain-specific tags across multiple records at once. This streamlines workspace management by letting you quickly filter and organize records. For example, you can exclude non-privacy-tagged items in the Privacy Workspace for a more focused, efficient view. [Entity record page enhancements](https://www.servicenow.com/docs/access?context=entities-in-risk-ws&family=zurich&ft:locale=en-US) : The Entity type and Downstream Risks (now renamed as Risks) related lists on the Entity record page have been converted to UIB pages, providing a more intuitive and modern interface. The Downstream Risks related list has been moved to the dedicated Risks page, featuring organized tabs for Directly related risks, Suggested risks, and All risks. Note: You may experience issues with custom actions that emit events on the Risks or Entity type related lists on the Entity record page. To ensure a smooth transition and adopt these changes, refer to [KB2593527](https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB2593527) for detailed guidance. [My tasks in the workspace](https://www.servicenow.com/docs/access?context=configuration-of-tasks&family=zurich&ft:locale=en-US) : Easily manage which configurations appear on the My Tasks page by marking them Active or Inactive. This gives you flexibility to enable or disable configurations without manual intervention, simplifying administration and improving control. An Active/Inactive flag has also been introduced in the My Choice table for enhanced configuration management. [Entities](https://www.servicenow.com/docs/access?context=what-is-an-entity&family=zurich&ft:locale=en-US) : Entity names in GRC now automatically update when the associated CI name changes. This enhancement improves data consistency, reduces manual effort, and ensures alignment between CI and Entity records without requiring custom automation. [Model Text Protocol (MCP) Client](https://www.servicenow.com/docs/access?context=mcp-client&family=zurich&ft:locale=en-US) : Enable users of the ServiceNow® AI Agent Studio to access tools that are hosted externally and published using an MCP Server via the Model Context Protocol Client application. Authenticate users with the MCP Server to add the MCP tool to an AI agent. [Create an AI agent](https://www.servicenow.com/docs/access?context=configure-next-best-action-agent&family=zurich&ft:locale=en-US) : The Add button on the AI agents tab is added as a drop-down providing different agent types for AI agent creation: * Chat * External [Configure ACLs for AI agents and agentic workflows](https://www.servicenow.com/docs/access?context=aia-security-implementation&family=zurich&ft:locale=en-US) : Configure the Access Control Lists for who can discover and trigger AI agents and agentic workflows in their guided setups in AI Agent Studio. You can determine whether an AI agent or agentic workflow behaves as a dynamic user or as an AI user. You can also specify if an AI agent or agentic workflow can be available to all authenticated users or publicly available. [Entity based record access update utility guided experience](https://www.servicenow.com/docs/access?context=entity-based-access-playbook&family=zurich&ft:locale=en-US) : Apply entity-based access (EBA) restrictions at the record level by using guided assistance in the entity based record access update utility. Guided assistance consists of a four-step process: 1. Define the scope for the relevant entities 2. Scope the record types 3. Apply the conditions to each record type to refine the scope 4. Review the selected records before you execute and initiate the update See the execution logs for a status after each update. You can get the details about the impacted records, applied scopes, and outcomes. [Entity based record access rules to secure new records](https://www.servicenow.com/docs/access?context=continuous-monitoring-of-entity-based-access&family=zurich&ft:locale=en-US) : Configure entity-based record access rules on record types to ensure that access restrictions are applied automatically to secure new records or modified records related to entities with active EBA configurations. [Deactivation of entity-based access configuration](https://www.servicenow.com/docs/access?context=deactivating-entity-based-access&family=zurich&ft:locale=en-US) : Deactivate the entity-based access configuration, enabling the system to automatically assess the records that it impacts. If entity-based access configuration is restricting a record, the access restrictions are removed. If other configurations also apply to the record, the restrictions remain in place and only the selected configuration is deactivated. | | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Changes Between your current release family and Brazil, some changes were made to existing Common Core features. {#dfrn3-commoncore-summary__entry__18} | Release | Release notes | |-|-| | Zurich | [Downstream risks related list](https://www.servicenow.com/docs/access?context=entities-in-risk-ws&family=zurich&ft:locale=en-US) : The Downstream risks related list on the entity record page has been renamed Risks. Coral theme : Coral is now the default theme for Vendor Management Workspace, portal, and mobile experiences. This theme provides a fresh look and feel, featuring brand-neutral illustrations to enhance your user experience. A dark theme option is available for web and mobile experiences. [States in the entity based record access update utility](https://www.servicenow.com/docs/access?context=eba-configuration-states&family=zurich&ft:locale=en-US) : A new Preview state has been added to the record access update utility life cycle. You can now review the estimated number of impacted records before you apply the restrictions. This step helps you to validate the selected scope, assess potential impacts, and make adjustments, if needed. It also adds an extra layer of control and reduces the risk of unintended access changes. | | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Removed Between your current release family and Brazil, some Common Core features or functionality were removed. {#dfrn3-commoncore-summary__entry__26} | Release | Release notes | |-|-| | Zurich | No updates for this release. | | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Deprecations Between your current release family and Brazil, some Common Core features or functionality were deprecated. {#dfrn3-commoncore-summary__entry__34} | Release | Release notes | |-|-| | Zurich | No updates for this release. | | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Activation information Review information on how to activate Common Core. {#dfrn3-commoncore-summary__entry__42} | Release | Release notes | |-|-| | Zurich | Activation information : Install Integrated Risk Management and ServiceNow Otto for IRM by requesting them from ServiceNow Store. Visit the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) website to view all the available apps and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the [ServiceNow Store version history release notes](https://www.servicenow.com/docs/access?context=sn-store-release-notes&family=zurich&ft:locale=en-US). Important: IRM is available in the ServiceNow Store. For details, see the "Activation information" section of these release notes. | | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Additional requirements If any additional requirements were introduced or changed for Common Core we have noted them here. {#dfrn3-commoncore-summary__entry__50} | Release | Release notes | |-|-| | Zurich | No updates for this release. | | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Browser requirements If any specific browser requirements were introduced or changed for Common Core we have noted them here. {#dfrn3-commoncore-summary__entry__58} | Release | Release notes | |-|-| | Zurich | No updates for this release. | | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Accessibility information Review details on accessibility information for Common Core, such as specific requirements or compliance levels. {#dfrn3-commoncore-summary__entry__66} | Release | Release notes | |-|-| | Zurich | Accessibility information : Dark theme : The new Coral theme includes a dark theme option for web and mobile experiences. This option is commonly used to alleviate eye strain and improve readability. | | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Localization information If there are specific localization considerations for Common Core we have noted them here. {#dfrn3-commoncore-summary__entry__74} | Release | Release notes | |-|-| | Zurich | No updates for this release. | | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Highlight information If there are specific highlight considerations for Common Core we have noted them here. {#dfrn3-commoncore-summary__entry__82} | Release | Release notes | |-|-| | Zurich | * Use the report a GRC issue AI agent in the Employee Center to report issues through a guided conversational experience. * Ensure seamless access for users and groups referenced in user fields on records by leveraging entity-based access restrictions through record attribute user access configuration. Minimize manual effort, reduce administrative overhead, and enable entity-based access with minimal disruption. * Configure which task and tab settings appear in My Tasks by marking them Active or Inactive in the applicable table for easier management. Use the Active/Inactive flag in the GRC choice table to control visibility. * Automatically sync and maintain entity names in GRC with associated CI names to improve data consistency and reduce manual effort. * Authenticate users with the MCP Server to add a Model Context Protocol tool to AI agents using the Model Context Protocol Client. * Create ACLs for AI agents and agentic workflows to customize who can discover and trigger AI agents and agentic workflows. * Generate control recommendations for each regulatory alert to address compliance requirements. Use these suggestions to save time, minimize manual effort, and ensure a consistent response to regulatory changes. * Apply access restrictions at the record level by using the record access update utility in guided assistance. You can also preview the impacted record counts before updating and review the results and execution logs after the update. * Apply access restrictions automatically to newly created or modified records using entity-based record access rules. * Deactivate the entity-based access configurations. * Enable entity-based access on custom GRC tables. For detailed documentation, see [Common GRC features](https://www.servicenow.com/docs/access?context=common-grc-features&family=zurich&ft:locale=en-US). | | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ]