--- sourceDocument: zurich Combined Product Files sourceDocumentLink: https://www.servicenow.com/docs/r/zurich/delta-yokohama-zurich Release : - zurich ft:locale : - en-US ft:publication_title : - zurich Combined Product Files ft:clusterId : - delta3zy bundleId : - delta3zy --- # Combined Access Management release notes for upgrades from Yokohama to Zurich # Combined Access Management release notes for upgrades from Yokohama to Zurich {#ariaid-title1} Release version: Zurich Updated October 8, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 4 minutes to read Summarize ![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete. ## Summary of Combined Access Management Release Notes for Upgrades from Yokohama to Zurich This consolidated release notes page provides ServiceNow customers with important information about upgrading Access Management from the Yokohama release family to Zurich. It summarizes new features, changes, removals, deprecations, activation details, and other considerations to help you prepare and implement the upgrade smoothly. Show full answer Show less ## Key Features Introduced from Yokohama to Zurich * **Security Data Filters:** Enhance data security by restricting sensitive data access to authorized users only. These filters operate before query execution, preventing data leakage at the query level and integrating seamlessly with GlideRecordSecure, GlideRecordSandbox, and GlideAggregateSandbox. * **Related Record Access:** Strengthen access controls by enforcing ACLs on related tables based on permissions from parent tables. This ensures users access only records linked to data they are authorized to view, supporting consistent and granular access management. * **Machine Identity Access Controls:** Enable fine-grained access restrictions for REST and SOAP endpoints. This feature allows defining which integrations can access specific resources, enhancing security and governance for machine-to-machine interactions. * **Scripting Governance Tool and Role:** Improve platform security by managing scripting privileges. A new deny-by-default behavior restricts scripting access unless users have the *sncrequiredscriptwriterpermission* role, which is automatically assigned post-upgrade to appropriate users via the Conditional Script Writer group. * **Datatype ACLs:** Simplify access control by allowing a single ACL to cover all columns of a specific data type across tables. This reduces redundant ACL configurations and streamlines security policy management. ## Changes, Removals, and Deprecations There were no changes, removals, or deprecations for Access Management features between Yokohama and Zurich releases. ## Activation and Additional Requirements * Access Management continues to be an AI Platform feature that is **active by default** in both Yokohama and Zurich releases, requiring no special activation steps. * There are no new additional requirements, browser requirements, accessibility considerations, or localization changes introduced in this upgrade. ## Practical Implications for ServiceNow Customers Upgrading to Zurich enhances your Access Management capabilities by providing stronger data protection through security filters and related record access, improving governance for integrations with machine identity controls, and tightening scripting permissions to reduce security risks. The introduction of datatype ACLs reduces administrative overhead for access controls. Before upgrading, review and complete the recommended pre- and post-upgrade tasks to ensure these new security features and governance tools are correctly applied and aligned with your organization's policies. Consolidated page of all release notes for Access Management from Yokohama to Zurich. ## How to use this page To help you prepare for your upgrade, we have combined the cross-family Access Management release notes onto one page. Read this summary of the new features, changes, and updated information for your product from Yokohama to Zurich. Tip: If there were no updates for a release notes section in a certain family release, we included a short note for your reference. For example, if a product did not have any updates in Tokyo, the row says "No updates for this release." ## Important information for upgrading Access Management to Zurich Before you upgrade to Zurich, review these pre- and post-upgrade tasks and complete the tasks as needed. {#dfrn3-accessmanagement-summary__entry__2} | Release | Release notes | |-|-| | Yokohama | No updates for this release. | | Zurich | No updates for this release. | [ ] ## New features Between your current release family and Zurich, new features were introduced for Access Management. {#dfrn3-accessmanagement-summary__entry__8} | Release | Release notes | |-|-| | Yokohama | [Security data filters](https://www.servicenow.com/docs/access?context=security-data-filters&family=yokohama&ft:locale=en-US) : Security data Filters enable you to control who can access sensitive data by restricting access to authorized users, regardless of how the data is accessed. Security data filters are applied before query execution, ensuring restricted data never leaves the database and prevents data leakage at the query level. Filters integrate into queries for GlideRecordSecure, GlideRecordSandbox, and GlideAggregateSandbox by default. [Related record access](https://www.servicenow.com/docs/access?context=related-record-access&family=yokohama&ft:locale=en-US) : Related record access integrated into the ACL framework enhances access management by enabling administrators to enforce specific ACLs for related tables. This ensures users can only access records in related tables, such as costs, estimations, or tasks, based on their permissions for the parent table, like projects or cases. Combined with broader ACL capabilities, Related record access ensures consistent, granular, and enforceable | | Zurich | [Machine identity access controls](https://www.servicenow.com/docs/access?context=machine-identity-access-controls&family=zurich&ft:locale=en-US) : Enforce fine-grained access to data via REST or SOAP endpoints using Machine Identity Access Controls. This feature enables you to define which integrations can access specific data, confirming that the integrations only have access to the resources they need. [Scripting Governance Tool](https://www.servicenow.com/docs/access?context=scripting-governance&family=zurich&ft:locale=en-US) tool and role : Review and help reduce the number of users with scripting privileges using the Scripting Governance Tool. This tool helps improve platform security with scripting governance based on user role.A new deny-by-default behavior is enforced for scripting unless you have the snc_required_script_writer_permission role. After an upgrade or zBoot, this role is automatically assigned via the Conditional Script Writer group. [Datatype ACL](https://www.servicenow.com/docs/access?context=datatype-acl&family=zurich&ft:locale=en-US) : Simplify and help reduce redundant ACL definitions with Datatype ACLs. Create a single ACL to target all table columns of a specific data type, streamlining access control configurations. | [ ] ## Changes Between your current release family and Zurich, some changes were made to existing Access Management features. {#dfrn3-accessmanagement-summary__entry__14} | Release | Release notes | |-|-| | Yokohama | No updates for this release. | | Zurich | No updates for this release. | [ ] ## Removed Between your current release family and Zurich, some Access Management features or functionality were removed. {#dfrn3-accessmanagement-summary__entry__20} | Release | Release notes | |-|-| | Yokohama | No updates for this release. | | Zurich | No updates for this release. | [ ] ## Deprecations Between your current release family and Zurich, some Access Management features or functionality were deprecated. {#dfrn3-accessmanagement-summary__entry__26} | Release | Release notes | |-|-| | Yokohama | No updates for this release. | | Zurich | No updates for this release. | [ ] ## Activation information Review information on how to activate Access Management. {#dfrn3-accessmanagement-summary__entry__32} | Release | Release notes | |-|-| | Yokohama | Activation information : Access Management is a ServiceNow AI Platform feature that is active by default. | | Zurich | Activation information : Access Management is a ServiceNow AI Platform feature that is active by default. | [ ] ## Additional requirements If any additional requirements were introduced or changed for Access Management we have noted them here. {#dfrn3-accessmanagement-summary__entry__38} | Release | Release notes | |-|-| | Yokohama | No updates for this release. | | Zurich | No updates for this release. | [ ] ## Browser requirements If any specific browser requirements were introduced or changed for Access Management we have noted them here. {#dfrn3-accessmanagement-summary__entry__44} | Release | Release notes | |-|-| | Yokohama | No updates for this release. | | Zurich | No updates for this release. | [ ] ## Accessibility information Review details on accessibility information for Access Management, such as specific requirements or compliance levels. {#dfrn3-accessmanagement-summary__entry__50} | Release | Release notes | |-|-| | Yokohama | No updates for this release. | | Zurich | No updates for this release. | [ ] ## Localization information If there are specific localization considerations for Access Management we have noted them here. {#dfrn3-accessmanagement-summary__entry__56} | Release | Release notes | |-|-| | Yokohama | No updates for this release. | | Zurich | No updates for this release. | [ ] ## Highlight information If there are specific highlight considerations for Access Management we have noted them here. {#dfrn3-accessmanagement-summary__entry__62} | Release | Release notes | |-|-| | Yokohama | * Security Data Filters are a powerful new feature designed to restrict access to sensitive records based on roles or security attributes. This ensures only authorized users can view data, regardless of how the data is accessed. * Related Record Access allows enforcement of consistent access rules across related tables, ensuring that users only see records associated with the data they are authorized to access. See [Access Control List Rules](https://www.servicenow.com/docs/access?context=access-control-rules&family=yokohama&ft:locale=en-US) for more information. | | Zurich | * Enforce access to data via REST or SOAP endpoints using the Machine Identity Access Controls, which helps improve security, governance, and auditability. * Target all table columns of a given data type with a single ACL using Datatype ACLs. * Govern scripting permissions with the Scripting Governance tool, a new base system deny-by-default behavior. See [Access Control List Rules](https://www.servicenow.com/docs/access?context=access-control-rules&family=zurich&ft:locale=en-US) for more information. | [ ]