Combined Identity release notes for upgrades from Yokohama to Zurich

zurich Combined Product Files

Release

zurich

ft:locale

en-US

ft:publication_title

zurich Combined Product Files

ft:clusterId

delta3zy

bundleId

delta3zy

Combined Identity release notes for upgrades from Yokohama to Zurich

Release version: Zurich

Updated August 11, 2026

5 minutes to read

Summarize

Summarized using AI

Summary of Combined Identity Release Notes for Upgrades from Yokohama to Zurich

This document consolidates the key updates, new features, changes, and important upgrade information for the ServiceNow Identity product from the Yokohama release family to Zurich. It is designed to help ServiceNow customers prepare for and understand the enhancements and modifications introduced during these upgrades, ensuring smooth transitions and effective use of Identity capabilities.

Show full answer Show less

New Features

Yokohama: Introduction of Access Insights within the ServiceNow Access Analyzer V4, allowing you to gain detailed insights into user role and group entitlements at peer organizational levels, enhancing access comparison and governance.
Zurich: Introduction of the Machine Identity Console to manage non-human identities (NHIs). This console provides visibility into data integration accounts, their access patterns, and configurations to support smarter security decisions.

Key Changes

Yokohama: Access Analyzer administration now requires assignment of the accessanalyzeradmin role for managing access insights and configurations.
Zurich: Enhancements to Access Analyzer include displaying Security data filters with statuses of Applied or Undefined in results, and support for new ACL criteria controlled by references, improving access control granularity.

Activation and Requirements

Identity remains a ServiceNow AI Platform product and is active by default in both Yokohama and Zurich releases.
No additional browser or localization requirements were introduced between these releases.

Additional Highlights and Practical Guidance

AI Agents and Users Management: Both Yokohama Patch 11 and Zurich Patch 4 allow configuration of AI agents/users by selecting the AI identity type. The aiuseradmin role facilitates creation, editing, role assignment, and deletion of AI user identities. Role masking is supported to restrict privileges during AI agent execution, enhancing security and minimizing risk.
Federated ID: Introduced in Yokohama Patch 10 and continued in Zurich, Federated ID uniquely identifies roles across multiple instances, simplifying role management and tracking in distributed environments.
Access Analyzer Updates: Zurich Access Analyzer v6 supports agentic workflows and AI agents in the Analyze Permissions feature, expanding analytical capabilities.
Machine Identity Console Metrics: The Zurich release offers an Inbound API Integration Usage dashboard providing statistics on API requestors and calls, aiding in monitoring and managing machine identities effectively.

Upgrade Preparation

Before upgrading to Zurich, review and complete any pre- and post-upgrade tasks specific to Identity to ensure a seamless transition. Note that Access Analyzer and its newer versions are available through the ServiceNow Store, requiring installation or updates accordingly.

What Customers Can Expect

By upgrading from Yokohama to Zurich, ServiceNow customers gain enhanced visibility and management of both human and non-human identities. New tools like the Machine Identity Console and improved Access Analyzer features support stronger security controls and compliance. The addition of Federated ID and AI user management capabilities streamlines administration across instances and AI-driven processes, helping organizations reduce risk and improve governance.

Consolidated page of all release notes for Identity from Yokohama to Zurich.

How to use this page

To help you prepare for your upgrade, we have combined the cross-family Identity release notes onto one page. Read this summary of the new features, changes, and updated information for your product from Yokohama to Zurich.

Tip:

If there were no updates for a release notes section in a certain family release, we included a short note for your reference. For example, if a product did not have any updates in Tokyo, the row says "No updates for this release."

Important information for upgrading Identity to Zurich

Before you upgrade to Zurich, review these pre- and post-upgrade tasks and complete the tasks as needed.


Release	Release notes
Yokohama	No updates for this release.
Zurich	No updates for this release.

New features

Between your current release family and Zurich, new features were introduced for Identity.


Release	Release notes
Yokohama	Access Insights Use the Access Insights module in the ServiceNow® Access Analyzer V4 tool to get access insights about role or group entitlements that are assigned to the user at a peer-level (meaning at the same organization, department, and Manager), while comparing the user access. Important: Access Insights (Access Analyzer V4) is available in the ServiceNow Store. For more information, visit ServiceNow Store.
Zurich	Machine Identity Console Use the Machine Identity Console to see what data integration accounts are accessing and how they’re configured. This console helps you make smarter security decisions about setting up these accounts.

Changes

Between your current release family and Zurich, some changes were made to existing Identity features.


Release	Release notes
Yokohama	Access Analyzer Assign the `access_analyzer_admin` role to the users to access and administer the Access Analyzer. Important: Access Analyzer V4 is available in the ServiceNow Store. For more information, visit ServiceNow Store.
Zurich	Access analyzer Display the Security data filter that is in the Applied or Undefined status in the Access Analyzer results. Access Analyzer also supports the new criteria in ACLs that is controlled by reference. Important: Access Analyzer is available in the ServiceNow Store. For more information, visit ServiceNow Store.

Removed

Between your current release family and Zurich, some Identity features or functionality were removed.


Release	Release notes
Yokohama	No updates for this release.
Zurich	No updates for this release.

Deprecations

Between your current release family and Zurich, some Identity features or functionality were deprecated.


Release	Release notes
Yokohama	No updates for this release.
Zurich	No updates for this release.

Activation information

Review information on how to activate Identity.


Release	Release notes
Yokohama	Identity is a ServiceNow AI Platform product that is active by default.
Zurich	Identity is a ServiceNow AI Platform product that is active by default.

Additional requirements

If any additional requirements were introduced or changed for Identity we have noted them here.


Release	Release notes
Yokohama	No updates for this release.
Zurich	No updates for this release.

Browser requirements

If any specific browser requirements were introduced or changed for Identity we have noted them here.


Release	Release notes
Yokohama	No updates for this release.
Zurich	No updates for this release.

Accessibility information

Review details on accessibility information for Identity, such as specific requirements or compliance levels.


Release	Release notes
Yokohama	No updates for this release.
Zurich	No updates for this release.

Localization information

If there are specific localization considerations for Identity we have noted them here.


Release	Release notes
Yokohama	No updates for this release.
Zurich	No updates for this release.

Highlight information

If there are specific highlight considerations for Identity we have noted them here.


Release	Release notes
Yokohama	Yokohama Patch 11 Configure AI Agents or AI users by selecting the `AI` option from the Identity drop-down menu. Use the `ai_user_admin` role for creating, editing, and role management of AI users. Using the role you can view, create, edit, assign roles to, and delete users with the identity type as `AI`. Use role masking for AI agents and agentic workflows to limit the inherited roles during tool execution, verifying that AI agents run with restricted privileges, minimizing potential security risks and helping prevent unintended actions. To learn more, see Role masking. Yokohama Patch 10 Use Federated ID to uniquely identify roles across multiple instances. Federated ID provides a unique identifier for roles, making it easier to manage and track them across instances. To know more, see Exploring Federated ID. Yokohama Use the Access Insights module in the ServiceNow® Access Analyzer V4 tool to get access insights of your users, while comparing the user access. Assign the `access_analyzer_admin` role to the users to access and administer the Access Analyzer. See Identity for more information.
Zurich	Zurich Patch 4 Configure AI Agents or AI users by selecting the `AI` option from the Identity type drop-down menu. Use the `ai_user_admin` role for creating, editing, and role management of AI users. Using the role you can view, create, edit, assign roles to, and delete users with the identity type as `AI`. Use role masking for AI agents and agentic workflows to limit the inherited roles during tool execution, verifying that AI agents run with restricted privileges, minimizing potential security risks and helping prevent unintended actions. To learn more, see Role masking. Access Analyzer v.6 supports agentic workflows and AI agents in the Analyze Permissions feature. Important: Access Analyzer is available in the ServiceNow Store. For more information, visit ServiceNow Store. Use Federated ID to uniquely identify roles across multiple instances. Federated ID provides a unique identifier for roles, making it easier to manage and track them across instances. To know more, see Explore Federated ID. View the Inbound API Integration Usage dashboard under the Machine Identity Console's Unique API calls page to access statistics for requestors and their API calls. To know more, see Metrics and View dashboard. Zurich Manage your non-human identities (NHIs) using the Machine Identity Console. Support security data filter functionality in Applied or Undefined status and Controlled by Refs functionality during access control list (ACL) query. Important: Access Analyzer is available in the ServiceNow Store. For more information, visit ServiceNow Store. See Identity for more information.