---
sourceDocument: Brazil Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Honor admin override ACLs

# Honor admin override ACLs {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
The glide.security.admin.override.accessterm property controls whether admins can control override access control list (ACL) evaluation.
The glide.security.admin.override.accessterm property controls how the platform decides whether an administrator can bypass an access rule when a resource (for example, a table, a field) has more than one
access rule applied to it. Each individual access rule can be configured to grant or deny an admin override on its own.

When this property is set to its recommended value of true, the per-rule setting is honored individually. A rule explicitly configured to deny an admin override still blocks the administrator even if
another rule on the same resource permits one. When set to false, the bypass decision is instead made at a broader, combined level. This can let an administrator through even though one of the applicable
rules was specifically configured to block the override.

Ensure that the property glide.security.admin.override.accessterm system property is set to true.

## More information {#sc-honor-admin-override-acls__section_wc1_cqn_phc}

{#sc-honor-admin-override-acls__table_ajc_b43_3kb__entry__2}

| Attribute | Description |
|-|-|
| Configuration name | glide.security.admin.override.accessterm |
| Configuration type | System Properties (/sys_properties_list.do) |
| Data type | Boolean |
| Recommended value | true |
| Default value | true |
| Fallback value | false |
| Category | [Access control](https://www.servicenow.com/docs/x7vcJqvJ0dwOasc9M2~48A "The access control category audits the process of protecting resources from unauthorized access through granting and denying requests based on a permission model. This includes ensuring an entity accessing a resource holds valid credentials to do so, creating and protecting a well-defined set of roles or permissions and ensuring role or permission controls are protected from replay and tampering.") |
| Security risk | * Severity score: 3.8 * CVSS rating: Low * Security risk details: When access checks are evaluated coarsely, a privileged user can access a resource despite rules set to deny override. This allows the most restrictive protection to be ignored in favor of a more permissive rule on the same resource. Protected data can be set to readable or writable, risking unauthorized access to sensitive information. {#sc-honor-admin-override-acls__ul_g1g_3sf_xwb} |
| Functional impact | Changing this property to true affects only elevated-admin access decisions on resources governed by more than one access rule; regular users and single-rule resources see no behavior change. After the change, test contextual security scenarios where an admin role is granted access to a field or record through multiple layered rules, confirming that a rule explicitly configured to deny override still blocks the admin as expected. No service availability impact is expected since the change only tightens an authorization decision path. |
| Dependencies and prerequisites | None |
[ ]

{#sc-honor-admin-override-acls__table_ajc_b43_3kb}

To learn more about adding or creating a system
property, see [Add a system property](https://www.servicenow.com/docs/access?context=t_AddAPropertyUsingSysPropsList&version=brazil&pubname=brazil-platform-administration&ft:locale=en-US).