Combined Access Management release notes for upgrades from Xanadu to Yokohama

  • Release version: Yokohama
  • Updated July 20, 2026
  • 4 minutes to read
    • Summarize
    Summarized using AI
    This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.

    Summary of Combined Access Management Release Notes for Upgrades from Xanadu to Yokohama

    This document consolidates all key Access Management updates for ServiceNow customers upgrading from the Xanadu release family to Yokohama. It provides a comprehensive view of new features, changes, and important upgrade considerations relevant to Access Management, ensuring you can prepare effectively and leverage enhanced security controls in your environment.

    Show full answer Show less

    New Features

    • Security Data Filters (Yokohama): These filters allow you to restrict access to sensitive data at the query level by enforcing role or security attribute-based controls before query execution. This prevents unauthorized data exposure by ensuring sensitive information never leaves the database. Security Data Filters integrate natively with GlideRecordSecure, GlideRecordSandbox, and GlideAggregateSandbox queries.
    • Related Record Access (Yokohama): Enhances ACL enforcement by enabling administrators to apply access controls consistently across related tables. For example, user permissions on parent records (like projects or cases) govern access to associated child records (such as costs or tasks), maintaining granular and consistent data access.

    Changes

    • Deny-Unless Condition for ACLs (Xanadu): Introduces a new decision type field to specify conditions under which access is denied or granted, allowing more precise access control strategies.
    • Enhanced ACL Security (Xanadu): Improves platform security by defaulting to deny access if an ACL is misconfigured or empty, reducing risk from unintended permissions.
    • ACL Query Behavior (Xanadu): Adds new operators—query match and query range—to refine access control when querying data, enabling more granular data access rules.
    • Explicit Roles Behavior Adjustment (Xanadu): When the system property glide.security.explicitroles.donotfix is set to true, the internal role sncinternal is no longer added automatically, providing better role management.

    Removed and Deprecated Features

    No Access Management features or functionality were removed or deprecated between Xanadu and Yokohama.

    Activation and Requirements

    • Access Management remains an active ServiceNow AI Platform feature by default in both Xanadu and Yokohama releases.
    • There are no new additional system requirements, browser requirements, or localization considerations introduced between these releases.

    Key Outcomes for ServiceNow Customers

    • Upgrade preparation is streamlined by having all relevant Access Management release notes combined, allowing you to easily track new capabilities and necessary actions.
    • Security Data Filters and Related Record Access introduce powerful controls to protect sensitive data and enforce consistent access across related records, significantly improving data security and compliance.
    • Enhanced ACL features enable more granular and secure access control, helping prevent unauthorized access due to misconfigurations.
    • Maintaining default activation and unchanged requirements ensures a smooth upgrade path without additional deployment complexities.

    Consolidated page of all release notes for Access Management from Xanadu to Yokohama.

    How to use this page

    To help you prepare for your upgrade, we have combined the cross-family Access Management release notes onto one page. Read this summary of the new features, changes, and updated information for your product from Xanadu to Yokohama.

    Tip:
    If there were no updates for a release notes section in a certain family release, we included a short note for your reference. For example, if a product did not have any updates in Tokyo, the row says "No updates for this release."

    Important information for upgrading Access Management to Yokohama

    Before you upgrade to Yokohama, review these pre- and post-upgrade tasks and complete the tasks as needed.

    Release Release notes

    Xanadu

    		 No updates for this release.

    Yokohama

    		 No updates for this release.

    New features

    Between your current release family and Yokohama, new features were introduced for Access Management.

    Release Release notes

    Xanadu

    		 No updates for this release.

    Yokohama
    Security data filters
    Security data Filters enable you to control who can access sensitive data by restricting access to authorized users, regardless of how the data is accessed. Security data filters are applied before query execution, ensuring restricted data never leaves the database and prevents data leakage at the query level. Filters integrate into queries for GlideRecordSecure, GlideRecordSandbox, and GlideAggregateSandbox by default.
    Related record access
    Related record access integrated into the ACL framework enhances access management by enabling administrators to enforce specific ACLs for related tables. This ensures users can only access records in related tables, such as costs, estimations, or tasks, based on their permissions for the parent table, like projects or cases. Combined with broader ACL capabilities, Related record access ensures consistent, granular, and enforceable

    Changes

    Between your current release family and Yokohama, some changes were made to existing Access Management features.

    Release Release notes

    Xanadu
    Deny-Unless condition for ACLs
    A new decision type field helps administrators define the conditions that give or deny users access to data. It enables more granular decision-making while defining the right access strategy on the platform.
    Enhanced ACL Security
    If an ACL is misconfigured or empty, you can deny access to data by default, enhancing the overall security of the platform.
    ACL Query Behavior
    Fine-tune your access control by dictating rules for querying data with the introduction of new operators: query match and query range.
    >Explicit Roles behavior adjustment
    When the system property glide.security.explicit_roles.do_not_fix is true, the snc_internal role is no longer added in memory or to the User Roles [sys_user_has_role] table.

    Yokohama

    		 No updates for this release.

    Removed

    Between your current release family and Yokohama, some Access Management features or functionality were removed.

    Release Release notes

    Xanadu

    		 No updates for this release.

    Yokohama

    		 No updates for this release.

    Deprecations

    Between your current release family and Yokohama, some Access Management features or functionality were deprecated.

    Release Release notes

    Xanadu

    		 No updates for this release.

    Yokohama

    		 No updates for this release.

    Activation information

    Review information on how to activate Access Management.

    Release Release notes

    Xanadu

    Access Management is a ServiceNow AI Platform feature that is active by default.

    Yokohama

    Access Management is a ServiceNow AI Platform feature that is active by default.

    Additional requirements

    If any additional requirements were introduced or changed for Access Management we have noted them here.

    Release Release notes

    Xanadu

    		 No updates for this release.

    Yokohama

    		 No updates for this release.

    Browser requirements

    If any specific browser requirements were introduced or changed for Access Management we have noted them here.

    Release Release notes

    Xanadu

    		 No updates for this release.

    Yokohama

    		 No updates for this release.

    Accessibility information

    Review details on accessibility information for Access Management, such as specific requirements or compliance levels.

    Release Release notes

    Xanadu

    		 No updates for this release.

    Yokohama

    		 No updates for this release.

    Localization information

    If there are specific localization considerations for Access Management we have noted them here.

    Release Release notes

    Xanadu

    		 No updates for this release.

    Yokohama

    		 No updates for this release.

    Highlight information

    If there are specific highlight considerations for Access Management we have noted them here.

    Release Release notes

    Xanadu
    • Fine-tune your access control with the new Deny-Unless ACL and query operators.
    • Enhance ACL security with a new default denial behavior.
    • Identify and fix empty or misconfigured ACLs with new ACL creation rules.

    See Access Control List Rules for more information.

    Yokohama
    • Security Data Filters are a powerful new feature designed to restrict access to sensitive records based on roles or security attributes. This ensures only authorized users can view data, regardless of how the data is accessed.
    • Related Record Access allows enforcement of consistent access rules across related tables, ensuring that users only see records associated with the data they are authorized to access.

    See Access Control List Rules for more information.