---
sourceDocument: Brazil Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Set guest user for soap requests

# Set guest user for soap requests {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Configure this property to control the level of access of unauthenticated SOAP requests.
Use the com.glide.soap.guest_user system property to control the access level of unauthenticated SOAP requests. If this property isn't set to the recommended value of <kbd class="ph userinput">soap.guest</kbd> or is set
to a user with limited privileges, then SOAP requests execute on behalf of this user.

Ensure the property is set to <kbd class="ph userinput">soap.guest</kbd> to ensure an appropriate level of access for unauthenticated SOAP requests.

## More information {#sc-set-guest-user-for-soap-requests__section_wc1_cqn_phc}

{#sc-set-guest-user-for-soap-requests__table_ajc_b43_3kb__entry__2}

| Attribute | Description |
|-|-|
| Configuration name |   |
| Configuration type | System Properties (/sys_properties_list.do) |
| Data type | String |
| Recommended value | soap.guest |
| Default value | soap.guest |
| Fallback value | soap.guest |
| Category | [Access control](https://www.servicenow.com/docs/x7vcJqvJ0dwOasc9M2~48A "The access control category audits the process of protecting resources from unauthorized access through granting and denying requests based on a permission model. This includes ensuring an entity accessing a resource holds valid credentials to do so, creating and protecting a well-defined set of roles or permissions and ensuring role or permission controls are protected from replay and tampering.") |
| Security risk | * Severity score: 8.1 * CVSS score: High * Security risk details: Unauthenticated SOAP requests can allow unauthorized access if not properly restricted. Evaluating these requests against a minimally privileged user helps reduce the risk of exposing sensitive operations. Failure to enforce this control may result in elevated access and compromise system integrity. {#sc-set-guest-user-for-soap-requests__ul_kyj_pdz_43c} |
| Functional impact | SOAP requests are restricted to the permissions of the soap.guest user. If an integration relies on a resource that does not have the appropriate ACLs for soap.guest, those requests will result in permission denials. |
| Dependencies and prerequisites | None |
[ ]

{#sc-set-guest-user-for-soap-requests__table_ajc_b43_3kb}