---
sourceDocument: Brazil Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security
Release :
- brazil
ft:locale :
- en-US
ft:publication_title :
- Brazil Platform security
ft:clusterId :
- psec
bundleId :
- psec
workflow :
- Platform
---
# System properties
# Zero Trust Access system properties {#ariaid-title1}
Release version: Brazil
Updated September 10, 2026
 1 minute to read
Use system properties to enable and customize Zero Trust Access to meet your security requirements.
## Properties {#session-access-system-properties__section_lbp_gzj_gxb}
{#session-access-system-properties__table_vkg_2wf_twb__entry__2}
| Property | Description |
|-|-|
| Enable Zero Trust Session Access | Option that enables administrators to use the Zero Trust Session Access feature. By default the value is false. |
| Enable debug logging for Zero Trust Session Access | Option to enable debug logging for Zero Trust Session Access. |
| Preference to remove/limit roles in case of conflict. Whenever a common role is part of both remove and limit role(s) set, the precedence is decided based on this property. | Remove Roles or Limit Roles |
| The number of days after which session access audit data will be deleted. The default value is 30 days and the maximum is 180 days. | By default, it's 30 days. |
| The number of seconds after which the refresh token will be revoked if the session access policy is using IDP attributes. It should be between access token lifespan and refresh token lifespan. The default value is 1800 seconds. | By default, it's 1800 seconds. |
| Information to be displayed when some privileges have been removed from the session for a user. | Description that you want to display to your users regarding limiting or removal of privileges. Sample Description: Based on security policies defined by the administrator, some of your roles have been removed from this session. Please get in touch with your administrator for more information. |
[Table 1. Zero Trust Access system properties]
{#session-access-system-properties__table_vkg_2wf_twb}
The `glide.authenticate.session_access.user_info_message` property supports translation for the default out-of-box message only. The default message is delivered through a `sys_ui_message` record and
is automatically displayed in the user's selected language.
If you modify this property to use a custom message and require it to appear in languages other than English, you must define the translations manually. For each language, create `sys_ui_message` record with the
following values:
* Code: session_access_info_message_code
* Key: Identical to the value configured in the property
* Message: The translated text of the property value for that language
{#session-access-system-properties__ul_njy_hxy_yjc}
Use the default English sys_ui_message record (Code: session_access_info_message_code) as a reference template. Once the records are created, the custom message is displayed in the
corresponding language at login when a user's session access is reduced.