---
sourceDocument: Brazil Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Enforce strict elevate privilege

# Enforce strict elevate privilege {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Use the glide.security.strict_elevate_privilege property to control whether roles marked as privileged must be manually elevated for the user to be granted the role's capabilities.
When the glide.security.strict_elevate_privilege system property is set to true, roles marked as privileged must be manually elevated by an admin user when creating a new session. This
grants the user the role's capabilities. When set to false, roles marked as privileged are automatically elevated during an admin user new session, and don't require manual elevation (with exception of
security_admin). Setting this property to the secure value adds an extra layer of security validation to role elevation by privileged user.

Ensure that glide.security.strict_elevate_privilege is set to true as it allows a user with admin to manually elevate to a role they want.

## More information {#sc-enforce-strict-elevate-privilege__section_qhx_1b1_xwb}

{#sc-enforce-strict-elevate-privilege__table_ajc_b43_3kb__entry__2}

| Attribute | Description |
|-|-|
| Configuration name | glide.security.strict_elevate_privilege |
| Configuration type | System Properties (/sys_properties_list.do) |
| Data type | Boolean |
| Recommended value | true |
| Default value | true |
| Fallback value | true |
| Category | [Access control](https://www.servicenow.com/docs/x7vcJqvJ0dwOasc9M2~48A "The access control category audits the process of protecting resources from unauthorized access through granting and denying requests based on a permission model. This includes ensuring an entity accessing a resource holds valid credentials to do so, creating and protecting a well-defined set of roles or permissions and ensuring role or permission controls are protected from replay and tampering.") |
| Security risk | * Severity score: 6.7 * CVSS score: Medium * Security risk details: This risks potential privilege misuse or accidental execution of high-impact actions. Requiring manual elevation adds a deliberate security checkpoint that helps prevent unauthorized or unintended access to sensitive capabilities. {#sc-enforce-strict-elevate-privilege__ul_g1g_3sf_xwb} |
| Dependencies and prerequisites | None |
| Functional impact | This property strictly requires admin role users to elevate privileges when needed. |
[ ]

{#sc-enforce-strict-elevate-privilege__table_ajc_b43_3kb}