---
sourceDocument: Brazil Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security
Release :
- brazil
ft:locale :
- en-US
ft:publication_title :
- Brazil Platform security
ft:clusterId :
- psec
bundleId :
- psec
workflow :
- Platform
---
# Prevent disabling of data separation enforcement
# Prevent disabling of data separation enforcement {#ariaid-title1}
Release version: Brazil
Updated September 10, 2026
 1 minute to read
Prevent bypassing Mosaic domain-visibility filtering to maintain data separation boundaries across business units and customer domains.
The glide.one_extend.mosaic.sync.disable_data_separation_enforcement property controls whether the platform's Mosaic domain-visibility filtering for data-separated instances is bypassed.
When set to false (the secure, default state), the platform continues to compute and enforce per-domain visibility grants whenever data separation is enabled. Domain-scoped users see only the records within
their granted visibility roots and Mosaic consumers apply the same filtering.
When domain-visibility filtering is bypassed on an instance with data separation enabled, the platform stops computing which domains a user is permitted to see. Instead, the platform treats every domain as visible to all users.
## More information {#sc-prevent-disabling-of-data-separation-enforcement__section_more_info}
{#sc-prevent-disabling-of-data-separation-enforcement__table_config_details__entry__2}
| Attribute | Description |
|-|-|
| Configuration name | glide.one_extend.mosaic.sync.disable_data_separation_enforcement |
| Configuration type | System Properties (/sys_properties_list.do) |
| Data type | Boolean |
| Recommended value | false |
| Default value | false |
| Fallback value | false |
| Category | Data separation |
| Security risk | * Severity score: 5.4 * CVSS rating: Medium * Security risk details: When domain-visibility filtering is bypassed, users in one business unit or customer domain can access records belonging to another domain. Data becomes exposed across organizational boundaries that were designed to remain isolated. Failure to enforce this control may result in unauthorized cross-domain data disclosure and a breakdown of the data-separation guarantees an organization relies on for regulatory or contractual compliance. {#sc-prevent-disabling-of-data-separation-enforcement__ul_security_risk} |
| Functional impact | When set to false, the platform preserves domain-visibility filtering for Mosaic sync consumers. Integrations that were relying on the broader, unfiltered view of cross-domain records will see records disappear from their results. |
| Dependencies and prerequisites | Only applicable when domain and data separation is configured (plugin com.glide.domain.msp_extensions.installer active). |
[ ]
{#sc-prevent-disabling-of-data-separation-enforcement__table_config_details}