---
sourceDocument: Australia Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Restrict Impersonation to Admin

# Restrict Impersonation to Admin {#ariaid-title1}

* Release version: Australia
* 
* Updated March 12, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

The glide.sys.permissive.impersonate property can be used to prevent non-admin roles from impersonating other users.
When the glide.sys.permissive.impersonate system property is set to a value of false, only users with the admin role may impersonate. When this value is set to
true, users may be able to make use of application components that expose impersonation APIs to impersonate a higher privileged user.

Ensure that the property glide.sys.permissive.impersonate is set to a value of false. If this property does not exist, the default value is false.  
Warning:  
This is a safe harbor property, meaning the value can't be altered once it's changed. It is non-revertible.

## More information {#sc-restrict-impersonation-to-admin__section_qhx_1b1_xwb}

{#sc-restrict-impersonation-to-admin__table_ajc_b43_3kb__entry__2}

| Attribute | Description |
|-|-|
| Configuration name | glide.sys.permissive.impersonate |
| Configuration type | System Properties (/sys_properties_list.do) |
| Data type | Boolean |
| Recommended value | false |
| Default value | \<none\> |
| Fallback value | false |
| Category | [Access control](https://www.servicenow.com/docs/UcoTP53NgzpgtyyAIm1CdQ "The access control category audits the process of protecting resources from unauthorized access through granting and denying requests based on a permission model. This includes ensuring an entity accessing a resource holds valid credentials to do so, creating and protecting a well-defined set of roles or permissions and ensuring role or permission controls are protected from replay and tampering.") |
| Security risk | * Severity score: 6.7 * CVSS score: Medium * Security risk details: May result in unauthorized resource access if these application components are misconfigured. {#sc-restrict-impersonation-to-admin__ul_g1g_3sf_xwb} |
| Dependencies and prerequisites | None |
| Functional impact | Non-admin users can access Impersonation features with some customizations to other scripts and UI pages. However, it is essential to ensure that only the correct users are granted access to these features. Note: When glide.sys.permissive.impersonate is set to true, Non-admin users with the impersonate role can still impersonate. |
[ ]

{#sc-restrict-impersonation-to-admin__table_ajc_b43_3kb}