---
sourceDocument: Brazil IT Service Management
sourceDocumentLink: https://www.servicenow.com/docs/r/it-service-management

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil IT Service Management

ft:clusterId :

    - itsm

bundleId :

    - itsm

workflow :

    - Technology


---

# Enhanced security model features

# Enhanced security model features for incident tables {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Help prevent unauthorized access to incident-related tables using Deny-Unless access control lists (ACLs). A Deny-Unless authentication ACL restricts access for a non-authenticated user.
The enhanced security model implements Deny-Unless ACLs to restrict access for a non-authenticated user, such as a public role user. Without access, the user can't perform any actions on incident-related tables, including reading,
writing, deleting, creating, or accessing the report view. This model helps restrict access to the incident tables to authorized or approved user roles. For more information on Deny-Unless ACLs, see [Deny-Unless ACL](https://www.servicenow.com/docs/access?context=acl-denial-behavior&version=brazil&pubname=brazil-platform-security&ft:locale=en-US).  
This model is activated by default and applies to the following incident-related tables.{#comp-instal-itsm-enhanced-sec-features__table_uzx_dfs_ydc__entry__2}

| Table | Description |
|-|-|
| Incident KCS Article \[kb_template_incident_kcs_article\] | Stores knowledge articles created from the Incident KCS template. |
| Incident KCS Template \[kb_template_incident_kcs_template\] | Stores knowledge templates created from the Incident KCS template. |
[Table 1. Applicable Incident related tables by default]

{#comp-instal-itsm-enhanced-sec-features__table_uzx_dfs_ydc} This model is applicable on the following incident-related tables after installing the ITSM Enhanced Security Features (com.snc.itsm.enhanced_security) plugin:{#comp-instal-itsm-enhanced-sec-features__table_uly_yfs_ydc__entry__2}

| Table | Description |
|-|-|
| Incident \[incident\] | The Incident table is extended from the Task \[task\] table. It inherits all the fields, rules, and policies from the Task table. |
| Incident task \[incident_task\] | The Incident task \[incident_task\] table is a child of the Task \[task\] table and inherits all the incident task details. |
| Task CI \[task_ci\] | The Task CI \[task_ci\] table is extended from the Task \[task\] table and contains all the affected CI details. |
| Task outage \[task_outage\] | The Task outage \[task_outage\] table maintains the mapping between the Task \[task\] table and the Outage \[cmdb_ci_outage\] table. |
[Table 2. Incident related table dependent on plugin]

{#comp-instal-itsm-enhanced-sec-features__table_uly_yfs_ydc}  
Note:  
For new or zBoot instances, the ITSM Enhanced Security Features (com.snc.itsm.enhanced_security) plugin is installed automatically.

The ITSM Enhanced Security Features (com.snc.itsm.enhanced_security) plugin can be installed and activated by an administrator through a support request. Existing or upgrade users must test and evaluate the
results in their non-production instance and then install the plugin and implement the security change in their production instance. For more information, see [Activate ITSM Enhanced Security Features for Incident Management](https://www.servicenow.com/docs/Vey37y3lbS8JQEXaI8dOTA "Help prevent unauthorized access to incident-related tables by activating the ITSM Enhanced Security Features plugin (com.snc.itsm.enhanced_security), which uses deny unless authenticated access control lists (ACLs).").
* **[Activate ITSM Enhanced Security Features for Incident Management](https://www.servicenow.com/docs/Vey37y3lbS8JQEXaI8dOTA)**   
  Help prevent unauthorized access to incident-related tables by activating the ITSM Enhanced Security Features plugin (com.snc.itsm.enhanced_security), which uses deny unless authenticated access control lists (ACLs).

