--- sourceDocument: brazil Combined Product Files sourceDocumentLink: https://www.servicenow.com/docs/r/delta-zurich-brazil Release : - brazil ft:locale : - en-US ft:publication_title : - brazil Combined Product Files ft:clusterId : - delta3bz bundleId : - delta3bz --- # Combined Identity release notes for upgrades from Zurich to Brazil # Combined Identity release notes for upgrades from Zurich to Brazil {#ariaid-title1} Release version: Brazil Updated October 8, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 8 minutes to read Summarize ![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete. ## Summary of Combined Identity Release Notes for Upgrades from Zurich to Brazil This consolidated document provides ServiceNow customers with essential information on upgrading Identity from the Zurich release to the Brazil release. It gathers all relevant release notes, including new features, changes, deprecations, and important upgrade considerations across the Zurich, Australia, and Brazil releases. The goal is to help you prepare and understand the enhancements and modifications affecting Identity during the upgrade process. Show full answer Show less ## Key Features * **Machine Identity Console:** Introduced in Zurich, this console allows you to monitor data integration accounts, their access patterns, and configurations to improve security decision-making. The Brazil release adds an Inbound API Integration Usage dashboard for detailed API call statistics. * **Granular Admin Roles (Australia):** Enables developers and administrators to perform Identity configuration tasks without full admin privileges, enhancing security and operational control. * **Role Masking for AI Agents:** Available from Australia and enhanced in Brazil, role masking limits inherited roles during AI agent and agentic workflow execution. This ensures AI agents operate with restricted privileges, reducing security risks and unintended actions. * **User Management Enhancements:** Allows configuration of AI agents or AI users with a dedicated identity type and the aiuseradmin role for managing AI user lifecycle and roles. * **Federated ID Improvements:** Enables using any unique field (not just User ID) as an identifier for federated ID criteria in the User table, simplifying role management across multiple instances. * **Scripting Governance Tool:** Enhanced to manage user permissions for scripting on the ServiceNow AI Platform, supporting secure automation and customization. * **Coral Theme:** Now the default theme for new portals and experiences with Next Experience or Core UI enabled, offering a refreshed, brand-neutral look with optional dark mode for web and mobile. ## Key Changes * **Access Analyzer Updates:** Supports displaying Security data filters in Applied or Undefined status and new ACL query criteria controlled by references. Note that Access Analyzer is available via the ServiceNow Store. * **Role Masking Enhancements:** Dynamic role addition allows multiple roles for AI agents to be added as individual records, improving role management precision. * **Conditional Script Writer Group Restriction (Brazil):** Prevents this permission-only group from being selected as an assignment group on task-based records, enhancing operational clarity and security. ## Deprecations and Removals * The **User Registration Request plugin** (com.snc.userregistration) is marked for future deprecation starting with Brazil. It will be hidden and not activated on new instances but remains supported for now. * No other features or functionalities were removed or deprecated between Zurich and Brazil releases. ## Activation and Requirements * Identity is active by default in Zurich, Australia, and Brazil releases as a ServiceNow AI Platform product. * There are no new additional requirements, browser requirements, or localization considerations introduced between Zurich and Brazil. ## Accessibility The Coral theme, introduced as the default in Australia and continued in Brazil, enhances accessibility with a fresh, neutral design and dark mode options to improve user experience across portals and mobile devices. ## Practical Guidance for ServiceNow Customers * Before upgrading to Brazil, review and complete pre- and post-upgrade tasks to ensure a smooth transition. * Leverage the Machine Identity Console and Access Analyzer (available from the ServiceNow Store) to improve security posture and monitor non-human identities effectively. * Use granular admin roles to delegate Identity administration securely without granting full admin access. * Implement role masking for AI agents to mitigate security risks by restricting their permissions during execution. * Plan for the eventual deprecation of the User Registration Request plugin and adjust your configurations accordingly. Consolidated page of all release notes for Identity from Zurich to Brazil. ## How to use this page To help you prepare for your upgrade, we have combined the cross-family Identity release notes onto one page. Read this summary of the new features, changes, and updated information for your product from Zurich to Brazil. Tip: If there were no updates for a release notes section in a certain family release, we included a short note for your reference. For example, if a product did not have any updates in Tokyo, the row says "No updates for this release." ## Important information for upgrading Identity to Brazil Before you upgrade to Brazil, review these pre- and post-upgrade tasks and complete the tasks as needed. {#dfrn3-identity-summary__entry__2} | Release | Release notes | |-|-| | Zurich | No updates for this release. | | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## New features Between your current release family and Brazil, new features were introduced for Identity. {#dfrn3-identity-summary__entry__10} | Release | Release notes | |-|-| | Zurich | [Machine Identity Console](https://www.servicenow.com/docs/access?context=machine-identity-console&family=zurich&ft:locale=en-US) : Use the Machine Identity Console to see what data integration accounts are accessing and how they're configured. This console helps you make smarter security decisions about setting up these accounts. | | Australia | [Granular admin roles](https://www.servicenow.com/docs/access?context=granular-admin-roles&family=australia&ft:locale=en-US) : The granular admin role enables developers and administrators to complete administrative configuration tasks for Identity without requiring the full admin role. | | Brazil | No updates for this release. | [ ] ## Changes Between your current release family and Brazil, some changes were made to existing Identity features. {#dfrn3-identity-summary__entry__18} | Release | Release notes | |-|-| | Zurich | [Access analyzer](https://www.servicenow.com/docs/access?context=access-analyzer&family=zurich&ft:locale=en-US) : Display the Security data filter that is in the Applied or Undefined status in the Access Analyzer results. Access Analyzer also supports the new criteria in ACLs that is controlled by reference. Important: Access Analyzer is available in the ServiceNow Store. For more information, visit [ServiceNow Store](https://store.servicenow.com/store). Coral theme : Coral is now the default theme for new portal, web, and mobile experiences with Next Experience or Core UI enabled. This theme provides a fresh look and feel, featuring brand-neutral illustrations to enhance your user experience. A dark theme option is available for web and mobile experiences. | | Australia | [Role masking in Now Assist AI agents](https://www.servicenow.com/docs/access?context=aia-role-masking&family=australia&ft:locale=en-US) : Use role masking for AI agents and agentic workflows to limit the inherited roles during tool execution, verifying that AI agents run with restricted privileges, minimizing potential security risks and helping prevent unintended actions. [User management enhancements](https://www.servicenow.com/docs/access?context=t_CreateAUser&family=australia&ft:locale=en-US) : User management enhancements: * Configure AI agents or AI users by selecting the AI option from the Identity type drop-down menu. * Use the ai_user_admin role for creating, editing, and role management of AI users. Use this role to view, create, edit, assign roles to, and delete users with the identity type as AI. * Use the Identity sub-type field to categorize the identity type while creating a user. * Use the new date and time formats based on the user's preference while creating users. [Federated ID](https://www.servicenow.com/docs/access?context=federated-id&family=australia&ft:locale=en-US) : Use Federated ID to uniquely identify roles across multiple instances. Federated ID provides a unique identifier for roles, making it easier to manage and track them across instances. [Machine Identity Console](https://www.servicenow.com/docs/access?context=machine-identity-console&family=australia&ft:locale=en-US) : View the Inbound API Integration Usage dashboard under the Machine Identity Console's Unique API calls page to access statistics for requesters and their API calls. [Scripting Governance Tool](https://www.servicenow.com/docs/access?context=scripting-governance&family=australia&ft:locale=en-US) : Manage user permissions for scripting on the ServiceNow AI Platform from the enhanced scripting governance tool. | | Brazil | [Role masking in Now Assist AI agents](https://www.servicenow.com/docs/access?context=role-masking&family=brazil&ft:locale=en-US) : Use role masking for AI agents and agentic workflows to limit the inherited roles during tool execution, verifying that AI agents run with restricted privileges, minimizing potential security risks and helping prevent unintended actions. [Restrict the Conditional Script Writer group from assignment group selection on Scripting Governance Tool](https://www.servicenow.com/docs/access?context=explore-sgt&family=brazil&ft:locale=en-US) : The Conditional Script Writer group can no longer be selected as the assignment group on any task or incident based --- through the user interface with the base system configuration. [Federated ID](https://www.servicenow.com/docs/access?context=federated-id&family=brazil&ft:locale=en-US) : Choose any unique field --- not just User ID --- as the identifier in a federated ID criteria for the User table, as long as the criteria includes at least one unique field for generating federated ID. | [ ] ## Removed Between your current release family and Brazil, some Identity features or functionality were removed. {#dfrn3-identity-summary__entry__26} | Release | Release notes | |-|-| | Zurich | No updates for this release. | | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Deprecations Between your current release family and Brazil, some Identity features or functionality were deprecated. {#dfrn3-identity-summary__entry__34} | Release | Release notes | |-|-| | Zurich | No updates for this release. | | Australia | No updates for this release. | | Brazil | [User Registration Request plugin](https://www.servicenow.com/docs/access?context=c_UserRegistration&family=brazil&ft:locale=en-US) : Starting with the Brazil release, User Registration Request plugin (com.snc.user_registration) is being prepared for future deprecation. It will be hidden and no longer activated on new instances but will continue to be supported. | [ ] ## Activation information Review information on how to activate Identity. {#dfrn3-identity-summary__entry__42} | Release | Release notes | |-|-| | Zurich | Activation information : Identity is a ServiceNow AI Platform product that is active by default. | | Australia | Activation information : Identity is a ServiceNow AI Platform product that is active by default. | | Brazil | Activation information : Identity is a ServiceNow AI Platform product that is active by default. | [ ] ## Additional requirements If any additional requirements were introduced or changed for Identity we have noted them here. {#dfrn3-identity-summary__entry__50} | Release | Release notes | |-|-| | Zurich | No updates for this release. | | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Browser requirements If any specific browser requirements were introduced or changed for Identity we have noted them here. {#dfrn3-identity-summary__entry__58} | Release | Release notes | |-|-| | Zurich | No updates for this release. | | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Accessibility information Review details on accessibility information for Identity, such as specific requirements or compliance levels. {#dfrn3-identity-summary__entry__66} | Release | Release notes | |-|-| | Zurich | No updates for this release. | | Australia | Accessibility information : Coral theme : Coral is now the default theme for new portal, web, and mobile experiences with Next Experience or Core UI enabled. This theme provides a fresh look and feel, featuring brand-neutral illustrations to enhance your user experience. A dark theme option is available for web and mobile experiences. | | Brazil | Accessibility information : Coral theme : Coral is now the default theme for new portal, web, and mobile experiences with Next Experience or Core UI enabled. This theme provides a fresh look and feel, featuring brand-neutral illustrations to enhance your user experience. A dark theme option is available for web and mobile experiences. | [ ] ## Localization information If there are specific localization considerations for Identity we have noted them here. {#dfrn3-identity-summary__entry__74} | Release | Release notes | |-|-| | Zurich | No updates for this release. | | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Highlight information If there are specific highlight considerations for Identity we have noted them here. {#dfrn3-identity-summary__entry__82} | Release | Release notes | |-|-| | Zurich | [Zurich Patch 4](https://www.servicenow.com/docs/access?context=zurich-patch-4&family=zurich&ft:locale=en-US) * Configure AI Agents or AI users by selecting the AI option from the Identity type drop-down menu. * Use the ai_user_admin role for creating, editing, and role management of AI users. Using the role you can view, create, edit, assign roles to, and delete users with the identity type as AI. * Use role masking for AI agents and agentic workflows to limit the inherited roles during tool execution, verifying that AI agents run with restricted privileges, minimizing potential security risks and helping prevent unintended actions. To learn more, see [Role masking](https://www.servicenow.com/docs/access?context=aia-role-masking&family=zurich&ft:locale=en-US). * Access Analyzer v.6 supports agentic workflows and AI agents in the Analyze Permissions feature. Important: Access Analyzer is available in the ServiceNow Store. For more information, visit [ServiceNow Store](https://store.servicenow.com/store). * Use Federated ID to uniquely identify roles across multiple instances. Federated ID provides a unique identifier for roles, making it easier to manage and track them across instances. To know more, see [Explore Federated ID](https://www.servicenow.com/docs/access?context=federated-id&family=zurich&ft:locale=en-US). * View the Inbound API Integration Usage dashboard under the Machine Identity Console's Unique API calls page to access statistics for requestors and their API calls. To know more, see [Metrics](https://www.servicenow.com/docs/access?context=machine-identity-metrics&family=zurich&ft:locale=en-US) and [View dashboard](https://www.servicenow.com/docs/access?context=view-inbound-api-integration-usage-dashboard&family=zurich&ft:locale=en-US). Zurich * Manage your non-human identities (NHIs) using the Machine Identity Console. * Support security data filter functionality in Applied or Undefined status and Controlled by Refs functionality during access control list (ACL) query. Important: Access Analyzer is available in the ServiceNow Store. For more information, visit [ServiceNow Store](https://store.servicenow.com/store). See [Identity](https://www.servicenow.com/docs/access?context=identity-landing&family=zurich&ft:locale=en-US) for more information. | | Australia | [Australia Patch 3](https://www.servicenow.com/docs/access?context=australia-patch-3&family=australia&ft:locale=en-US) [Role Masking enhancement](https://www.servicenow.com/docs/access?context=role-masking&family=australia&ft:locale=en-US) : Dynamic role addition: Add multiple roles to an AI agent's role masking configuration as individual records, rather than as a single delimited list. Each role you add through the embedded list on the Agent Access Role Configuration form creates a record in the Agent Access Role Mapping table. Australia * Use the granular roles to complete administrative configuration tasks for Identity without requiring the full admin role. * Configure AI Agents or AI users by selecting the AI option from the Identity type drop-down menu. * Use the ai_user_admin role for creating, editing, and role management of AI users. Using the role you can view, create, edit, assign roles to, and delete users with the identity type as AI. * Use role masking for AI agents and agentic workflows to limit the inherited roles during tool execution, verifying that AI agents run with restricted privileges, minimizing potential security risks and helping prevent unintended actions. See [Identity](https://www.servicenow.com/docs/access?context=identity-landing&family=australia&ft:locale=en-US) for more information. | | Brazil | * Choose any unique field --- not just User ID --- as the identifier in a federated ID criteria for the User table, as long as the criteria includes at least one unique field for generating federated ID. * Use role masking for AI agents and agentic workflows to limit the inherited roles during tool execution, verifying that AI agents run with restricted privileges, minimizing potential security risks and helping prevent unintended actions. * Prevent the Conditional Script Writer group from being selected as the assignment group on task-based records, so the permission-only group is no longer used for operational assignment target. See [Identity](https://www.servicenow.com/docs/access?context=identity-landing&family=brazil&ft:locale=en-US) for more information. | [ ]