---
sourceDocument: Brazil Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security
Release :
- brazil
ft:locale :
- en-US
ft:publication_title :
- Brazil Platform security
ft:clusterId :
- psec
bundleId :
- psec
workflow :
- Platform
---
# Restrict platform analytics export to authorized roles
# Restrict platform analytics export to authorized roles {#ariaid-title1}
Release version: Brazil
Updated September 10, 2026
 2 minutes to read
Summarize
 Summarized using AI
This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.
## Summary of Restrict platform analytics export to authorized roles
ServiceNow provides a configuration property,glide.par.export.allowedroles, that enables customers to restrict the export of Platform Analytics dashboards and visualizations to PDF or PPT formats based on user roles.
This setting enhances data security by controlling who can generate downloadable exports from analytics content, reducing the risk of unauthorized data sharing or loss of control over sensitive information.
Show full answer Show less
## Key Features
* **Role-Based Export Control:** By specifying a comma-separated list of roles in the `glide.par.export.allowedroles` property, only users with at least one of these roles can export analytics dashboards and visualizations.
* **Dependency on Export Enablement:** This restriction only applies if the `glide.par.export.enabled` property is set to `true`. If exports are disabled globally, role restrictions are irrelevant.
* **Logging and Denial of Unauthorized Access:** Export attempts by users without the authorized roles are denied and logged for auditing purposes.
* **Default Behavior:** Without this property configured, any authenticated user with access to the export action can export content, posing potential security risks.
## Practical Application
To implement role-based export restrictions:
* Navigate to the system properties list at `/syspropertieslist.do` in your ServiceNow instance.
* Set the `glide.par.export.allowedroles` property with a comma-separated list of roles authorized to export analytics content.
* Ensure the `glide.par.export.enabled` property is set to `true`.
Instance administrators should carefully select roles based on their organization's reporting and data governance policies to limit export capabilities only to users who genuinely require them.
## Key Outcomes
* Enhanced security by preventing unauthorized users from exporting and potentially distributing sensitive analytics data.
* Greater control over data exports, aligning with organizational compliance and audit requirements.
* Visibility into unauthorized export attempts through logging, supporting incident response and policy enforcement.
* Improved governance over how dashboard and visualization data is shared beyond the ServiceNow platform.
The glide.par.export.allowed_roles property is a comma-separated list of role names permitted to export Platform Analytics dashboards and visualizations to PDF or PPT format.
This property determines which roles can export Platform Analytics dashboards and visualizations. When this property is not configured, any user who can reach the export action is allowed to export, with no additional role check. When populated, only users holding at least one of the listed roles may export; all others are denied and logged.
This property only takes effect when the glide.par.export.enabled property is also set to true.
To configure this property:
1. Navigate to /sys_properties_list.do on the instance.
2. Set the glide.par.export.allowed_roles property to a comma-separated list of role names that should be permitted to export Platform Analytics content.
## More information {#sc-restrict-platform-analytics-export__section_more_info}
{#sc-restrict-platform-analytics-export__table_property_details-restrict-platform-analytics-export__entry__2}
| Attribute | Description |
|-|-|
| Configuration name | glide.par.export.allowed_roles |
| Configuration type | System Properties (/sys_properties_list.do) |
| Data type | String, Comma-separated list of role names |
| Recommended value | Customer-specified roles authorized to export Platform Analytics dashboards and visualizations |
| Default value | Empty (no role restriction) |
| Fallback value | Empty (no role restriction) |
| Category | [Access control](https://www.servicenow.com/docs/x7vcJqvJ0dwOasc9M2~48A "The access control category audits the process of protecting resources from unauthorized access through granting and denying requests based on a permission model. This includes ensuring an entity accessing a resource holds valid credentials to do so, creating and protecting a well-defined set of roles or permissions and ensuring role or permission controls are protected from replay and tampering.") |
| Security risk | * By default, the glide.par.export.allowed_roles property is empty, allowing any authenticated user who can view a dashboard or visualization and reach its export action to generate an export. No role-based restriction beyond whatever access already let them view it on screen. * Converting on-screen, view-only access into a downloadable file materially changes the risk profile of that data. An export can be freely shared, stored outside the instance, or removed from the organization's control. Unlike an on-screen view, there is no way to revoke or audit it after the fact. This applies to every user who can reach the export feature, not a narrow population of privileged users. {#sc-restrict-platform-analytics-export__sc-sec-risk-restrict-platform-analytics-export} |
| Dependencies and prerequisites | This property has no effect unless the glide.par.export.enabled property is also set to true. If the glide.par.export.enabled property is set to false, export is already turned off entirely. |
| Functional impact | Populating this property restricts export to only the listed roles. Users without one of those roles will not be able to see or trigger export actions. This may be a visible change for existing users who previously exported without any role requirement. Instance owners should identify which roles genuinely need to distribute exported dashboard content and list only those roles. There is no single correct role list that applies to all instances, because this depends on each organization's own reporting and data-handling policies. |
[ ]
{#sc-restrict-platform-analytics-export__table_property_details-restrict-platform-analytics-export}