--- sourceDocument: Brazil Release Notes sourceDocumentLink: https://www.servicenow.com/docs/r/release-notes Release : - brazil ft:locale : - en-US ft:publication_title : - Brazil Release Notes ft:clusterId : - rn bundleId : - rn --- # Upgrade information for all Brazil features and products # Upgrade information for all Brazil features and products {#ariaid-title1} Release version: Brazil Updated October 8, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 9 minutes to read Cumulative release notes summary on upgrade information for Brazil features and products. Before you upgrade to Brazil, review the upgrade information for any products you may have. Some products require you to complete specific tasks before you upgrade. {#rn-summary-upgrade-info__rn-summary-upgrade-info-table__entry__2} | Application or feature | Details | |-|-| | AI Control Tower | : For details on upgrading to the redesigned AI Control Tower experience, see the [AI Control Tower Migration \[KB3144679\]](https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB3144679) article in Now Support. | | AI Desktop Actions | Upgrade the currently installed AI Desktop Actions Software Installers (MSIs) by downloading and installing the newer version of the application. Make sure to close the current execution and close the desktop app before staring the installation for upgrade. For more information, see [Download AI Desktop Actions installer for defined desktop actions](https://www.servicenow.com/docs/access?context=download-agentic-desktop-installer&version=brazil&pubname=brazil-intelligent-experiences&ft:locale=en-US). | | AI Risk and Compliance | : If you're upgrading from an earlier release, upgrade sequentially through each release rather than skipping versions. Upgrade scripts depend on running in order, and skipping releases can cause data inconsistencies or broken functionality. Warning: If AI Risk and Compliance, EA Workspace, and AI Control Tower Core are upgraded out of sync, business application associations may be lost or unavailable. For more information, see [Enterprise Architecture for AICT plugin installation and upgrade considerations](https://www.servicenow.com/docs/access?context=aict-ea-common-upgrade-considerations&version=brazil&pubname=brazil-intelligent-experiences&ft:locale=en-US) and [Configuring AI Risk and Compliance](https://www.servicenow.com/docs/access?context=configuring-ai-risk-and-compliance&version=brazil&pubname=brazil-governance-risk-compliance&ft:locale=en-US). | | Accounts Payable Operations | : If you're an APO user upgrading from a previous release and want to configure the case exclusion rules, copy the out-of-box flow Create Inquiry Case on Invoice email, customize it as needed, and activate it. | | Change Management | The ITSM Enhanced Security Features plugin (com.snc.itsm.enhanced_security) is now activated automatically when you upgrade to the Brazil release. Previously, the plugin was activated only on new instances. Activating the plugin adds "deny unless authenticated" access control list (ACL) rules to several IT Service Management tables. To revert to the pre-upgrade behavior, contact ServiceNow Support for a list of ACLs to deactivate on specific tables. As a last resort, Support can run a script that deactivates all the new ACLs. | | Cloud Cost Management | : * The Cloud Cost Management platform support is available beginning with the Xanadu release. For instructions on upgrading Cloud Cost Management to Brazil, see [Upgrade Cloud Cost Management](https://www.servicenow.com/docs/access?context=upgrade-cloud-insights-to-version-3-0&version=brazil&pubname=brazil-it-asset-management&ft:locale=en-US). * After upgrading to the Brazil release, review and reassess any ACL roles you have customized or deleted to confirm they reflect your expected access settings. * Starting with the Brazil release, the sn_change_write role for Insights admin (insights_admin) and Insights owner (insights_owner) has been replaced with the sn_change_read role. {#rn-summary-upgrade-info__ul_jq1_x5x_fkc} | | Configuration Management Database (CMDB) | : Dynamic IRE is now enabled by default on zBooted instances, while on upgraded instances that are using Static IRE, you can switch into using Dynamic IRE. Key benefits from the new Dynamic IRE engine include CI identification using an improved dynamic process and automatic updates of IRE identification rules during ingestion of data payloads. For more information, see [Dynamic IRE](https://www.servicenow.com/docs/access?context=dynamic-ire&version=brazil&pubname=brazil-servicenow-platform&ft:locale=en-US). | | Container Vulnerability Response | ServiceNow Otto® is the new AI experience brand. This change is reflected in the name of ServiceNow products, including the Now Assist for Vulnerability Response product name, which will be replaced with ServiceNow Otto for Unified Security Exposure Management. Your product entitlements remain unchanged. Check your entitlements to determine your access to specific features. Enhancements to Container Vulnerability Response permit you to see enriched container vulnerability data on data imports from your third-party scanners. After you upgrade, perform a full import to view the features on discovered container image, container image finding, and container vulnerable item records that are described in the following New in the Brazil release section. If you're currently using Container Vulnerability Response, and you don't intend to upgrade to Unified Security Exposure Management (USEM), install a version below v30.x of Container Vulnerability Response and for upgrades to supported third-party integration applications. For more information about the released versions of the Container Vulnerability Response application as well as the third-party and ServiceNow applications that are compatible with the Brazil release, see the [Vulnerability Response Compatibility Matrix and Release Schema Changes \[KB0856498\]](https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB0856498) article in the Now Support Knowledge Base. | | Core Business Suite | : * The ServiceNow AI Platform now brings you a new AI experience with three licensing tiers available: * Foundation: AI basics to deliver insights * Advanced: AI to boost productivity across relevant use cases * Prime: Act autonomously with all AI assets, and create your own {#rn-summary-upgrade-info__ul_szz_vjt_43c}For more information, see [ServiceNow product tiers](https://www.servicenow.com/docs/access?context=ai-native-sku-overview&version=brazil&pubname=brazil-intelligent-experiences&ft:locale=en-US). * ServiceNow Otto introduced AI on the platform. As that experience has evolved, there's a new name for the experience. ServiceNow Otto® is the conversational AI platform integrated into ServiceNow workflows. It provides agentic capabilities, supports multimodal interactions across web, mobile, and messaging channels, and enables autonomous orchestration for cross-system workflows. | | Data Privacy and Discovery | : Before upgrading to this release, review the product documentation for any breaking changes or upgrade considerations specific to your current version. Test upgrades in a non-production instance first to ensure compatibility with your workflows and customizations. | | Domain Separation | : Before upgrading to this release, review the product documentation for any breaking changes or upgrade considerations specific to your current version. Test upgrades in a non-production instance first to ensure compatibility with your domain policies and customizations. Domain separation policies may require validation or adjustment after upgrade to ensure continued enforcement. | | Encryption | : * If you're using scheduled upgrade to upgrade your Edge Encryption proxy from a pre-Brazil release to Brazil, you must meet the following requirements before you attempt the upgrade: * Upgrade the Java version to Java 21 or later. * Ensure you're on Zurich Patch 13 (ZP13) or Australia Patch 6 (AP6) or later. If you're on an earlier version, scheduled upgrade will not work. * If you're using command-line upgrade, you must upgrade the Java version to Java 21 or later. * Java 17 is required to install Edge Encryption on versions Yokohama through Australia. Prior to upgrading to Brazil, you must upgrade to Java 21. See [Installing Edge Encryption](https://www.servicenow.com/docs/access?context=c_InstallEdgeEncryptionProxy&version=brazil&pubname=brazil-platform-security&ft:locale=en-US) for installation details. | | Firewall Audits and Reporting | : Upgrade to the latest version through the ServiceNow Store. Review the release notes for each version before upgrading to understand new features and changes. | | Flows, subflows, and actions | : The Brazil release introduces enhanced protections for read‑only fields across the ServiceNow AI Platform®. These changes include a new "read_only_option" field with granular control levels, including "strict_read_only" and "client_script_modifiable". The changes occur in the back end and maintain backward‑compatible behavior. This update helps strengthen your instance security while preserving the flexibility you need. Refer to [KB2718122](https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB2718122) for additional technical details on how to identify affected fields and adjust their settings. For more information about granular read-only security options, see [Configuring read-only security options](https://www.servicenow.com/docs/access?context=read-only-option&version=brazil&pubname=brazil-platform-administration&ft:locale=en-US). | | Hardware Asset Management | : * After upgrading to the Brazil release, review and reassess any ACL roles you have customized or deleted to confirm they reflect your expected access settings. * A new system property, sn_itam_restrict_asset_read, controls read access to the Asset \[alm_asset\] table and its child tables for users with only the snc_internal role. For more information, see [Asset and CI management](https://www.servicenow.com/docs/access?context=c_ManagingAssets&version=brazil&pubname=brazil-it-asset-management&ft:locale=en-US). * A new system property, sn_itam_enable_manufacturer_reference_filter, controls the Manufacturer field reference filter on model records for the Product Model \[cmdb_model\] table. When this property is set to true, only active manufacturers appear as options. Set this property to false to also include inactive manufacturers. {#rn-summary-upgrade-info__ul_kpm_3ty_ckc} | | Impact | : Impact configuration requires a sequence of tasks in a unified registration process. See [Configuring Impact](https://www.servicenow.com/docs/access?context=configuring-impact-platform&version=brazil&pubname=brazil-impact&ft:locale=en-US). | | Incident Management | The ITSM Enhanced Security Features plugin (com.snc.itsm.enhanced_security) is now activated automatically when you upgrade to the Brazil release. Previously, the plugin was activated only on new instances. Activating the plugin adds "deny unless authenticated" access control list (ACL) rules to several IT Service Management tables. To revert to the pre-upgrade behavior, contact ServiceNow Support for a list of ACLs to deactivate on specific tables. As a last resort, Support can run a script that deactivates all the new ACLs. | | Kubernetes Visibility Agent (KVA) | : Upgrade to the latest version through the ServiceNow Store. After upgrading the application, update the Kubernetes Visibility Agent (KVA) deployment in your clusters to the corresponding version. | | Operational Resilience | : If you're upgrading from an earlier release, upgrade sequentially through each release rather than skipping versions. Upgrade scripts depend on running in order, and skipping releases can cause data inconsistencies or broken functionality. | | Platform Analytics experience | : Core UI dashboards and reports are visible from the Platform Analytics Dashboard and Data visualization libraries. | | Playbooks | : After you upgrade to Brazil, update the Workflow Studio application in the ServiceNow® Store. | | Pricing Management | : If you were using a custom pricing plan before upgrading to the v16.0.1 release, review the new default pricing plan, which is in a Retired state after the upgrade. Decide whether to publish the default plan as is or continue customizing your own plan. | | Project Portfolio Management | : Users who already have Project Portfolio Management can upgrade to PPM Standard. New users must purchase PPM Standard. For more information, see [Activate PPM Standard (Project Portfolio Management)](https://www.servicenow.com/docs/access?context=t_ActivateProjectPortfolioSuiteWithFinancials&version=brazil&pubname=brazil-it-business-management&ft:locale=en-US). | | Public Sector Digital Services | After the upgrade, certain public sector menus and menu items in CRM Workspace revert to their original CSM label names. You can relabel these items for public sector use by updating the labels for the Customer, Accounts, and Service Organizations UX list category records. For more details on relabeling, navigate to AllConstituent ServiceAdministrationGuided Setup, and select Configurable Workspace for Public Sector Digital ServicesCustomize Workspace Labels Manually. Customers who have not opted into new third-party LLM models may be silently routed to them during skill execution. If the new model is not provisioned or available in the customer's environment, this will result in skill execution failures. Check the models your skills are using in the AI Admin Hub console. | | SPM Enterprise-Wide Deployment | : After upgrading to SPM Enterprise-Wide Deployment v1.0.5, the system administrators loose access to the partitioned-data that they don't have the respective partition role assigned. Set the sn_spm_ewd.allow_admin_access_to_all_partitions system property to true if system administrators must continue accessing all the partitioned-data even though they don't have the respective partition role. For details, see [Configure administrator access to all partitions](https://www.servicenow.com/docs/access?context=configure-admin-access-to-all-partitions&version=brazil&pubname=brazil-it-business-management&ft:locale=en-US). | | Self-service and omnichannel engagement for CSM | : Introduced dynamic resizing to the Active Call Interaction Control toolbar. Buttons adapt to container width at runtime while keyboard navigation and focus order remain consistent. | | ServiceNow Otto for Virtual Agent | : You can upgrade ServiceNow Otto for Virtual Agent from the ServiceNow Store. | | Third-party Risk Management | : If you're upgrading from an earlier release, upgrade sequentially through each release rather than skipping versions. Upgrade scripts depend on running in order, and skipping releases can cause data inconsistencies or broken functionality. Enabling the sn_vdr_risk_asmt.sae_enabled property makes the Smart Assessment Engine (SAE) the default assessment engine and replaces the legacy experience. Warning: Enabling the sn_vdr_risk_asmt.sae_enabled property is irreversible. Set this property in a non-production instance and test thoroughly before enabling it in production. | | Threat Intelligence Security Center | : * Changes to the automated correlation rules affect which relationships are created after upgrade. Relationships created under the previous rule logic are preserved and aren't modified. * Creation of potential relationships stops once the potential relationship table reaches its configured volume threshold. Review the threshold configuration after upgrade if your instance ingests high-volume feeds. * The Relate Indicators with Objects Based on Common Observables correlation rule is removed. Relationships it created previously are preserved. | [ ] {#rn-summary-upgrade-info__rn-summary-upgrade-info-table} *[\>]: and then