Enable work order management query rules for service organizations [New in Security Center 1.5 and updated in 2.0]

  • Rversion finale: Australia
  • Mis à jour 12 mars 2026
  • 1 minute de lecture

    • Use the sn_fsm.use_query_rules property to apply rules and filters to the Field Service Management tables.

    When set to true, rules/filters from sn_query_rule table will be used to determine read access to Field Service Management-related tables (Work Order and Work Order Task) to the logged in user through query business rules and read ACLs. When false, the records won't be filtered based on query rules. Query business rules add additional security validations. Specifically, this property will filter records for agents, qualifiers, and dispatchers based on their assigned territory or territory membership. It is best practice to follow the principle of least privilege when reading records. When this property is not set to true, there may be increased risk of data exposure from Field Service Management tables.

    More information

    Attribute Description
    Configuration name sn_fsm.use_query_rules
    Configuration type System Properties (/sys_properties_list.do)
    Data type Boolean
    Recommended value false
    Default value false
    Category Access control
    Security risk
    • Severity score: 4.3
    • CVSS score: Medium
    • Security risk details: When this property is set to true, rules and filters from sn_query_rule will be used to determine read access to Field Service Management tables implementing the principle of least privilege. When set to false, the records won't be filtered based on query business rules and may have an increased risk of data exposure from Field Service Management tables.
    Dependencies and prerequisites None
    Functional impact

    When set to true, rules/filters from sn_query_rule table will be used to determine read access to Field service management related tables. For example, Work Order (WO) and Work Order Table (WOT) to the logged-in user through query business rules and READ ACLs. When false, the records won't be filtered based on query rules.

    Enabling this property secures the data, and all data (wm_task and wm_order) won't be visible to their users.
    References Field Service Management reference