Combined Access Management release notes for upgrades from Yokohama to Zurich

zurich Combined Product Files

Release

zurich

ft:locale

en-US

ft:publication_title

zurich Combined Product Files

ft:clusterId

delta3zy

bundleId

delta3zy

Combined Access Management release notes for upgrades from Yokohama to Zurich

Release version: Zurich

Updated July 20, 2026

4 minutes to read

Summarize

Summarized using AI

Summary of Combined Access Management Release Notes for Upgrades from Yokohama to Zurich

This consolidated guide assists ServiceNow customers in preparing for upgrades from the Yokohama to the Zurich release of Access Management. It summarizes new features, changes, removals, deprecations, and activation details to help you understand enhancements and maintain secure, effective access control in your platform.

Show full answer Show less

Key Features Introduced Between Yokohama and Zurich

Security Data Filters: These filters restrict access to sensitive data by enforcing role-based or attribute-based controls before query execution. They prevent unauthorized data exposure at the database query level and integrate seamlessly with GlideRecordSecure, GlideRecordSandbox, and GlideAggregateSandbox queries.
Related Record Access: Enhances the ACL framework by enforcing access permissions consistently across related tables (e.g., costs, estimations, tasks) based on permissions for the parent table (e.g., projects, cases). This ensures granular and consistent access control across interconnected data.
Machine Identity Access Controls: Enables fine-grained access enforcement for REST and SOAP endpoints by defining which integrations can access specific data. This enhances security by limiting integration access strictly to necessary resources.
Scripting Governance Tool and Role: Introduces a deny-by-default scripting permission model to improve platform security. Only users with the sncrequiredscriptwriterpermission role—automatically assigned after upgrade or zBoot via the Conditional Script Writer group—can execute scripts, helping reduce unnecessary scripting privileges.
Datatype ACLs: Simplify access control by allowing a single ACL to apply to all columns of a specific data type across tables. This reduces redundant ACL configurations and streamlines management.

Changes, Removals, and Deprecations

No changes, removals, or deprecations were recorded for Access Management features in either the Yokohama or Zurich releases.

Activation and Requirements

Access Management remains an active ServiceNow AI Platform feature by default in both Yokohama and Zurich releases.
There are no new additional requirements, browser requirements, localization considerations, or accessibility updates introduced between Yokohama and Zurich.

Why This Matters for Your ServiceNow Environment

These enhancements improve data security and governance by enforcing more granular and context-aware access controls. Security data filters and related record access ensure sensitive data is protected at the query and relational levels. Machine identity controls strengthen integration security, while scripting governance reduces risk from excessive script execution permissions. Datatype ACLs reduce administrative overhead by simplifying access rules.

What to Expect After Upgrading

Improved enforcement of data access policies, reducing risk of unauthorized data exposure.
More consistent ACL application across related data tables.
Enhanced governance and auditability for integrations accessing data via REST or SOAP.
Controlled scripting privileges by default, promoting platform security.
Streamlined ACL management with datatype-based rules.

By understanding and applying these new features and configurations, ServiceNow customers can maintain robust, secure access management aligned with best practices as they upgrade to the Zurich release.

Consolidated page of all release notes for Access Management from Yokohama to Zurich.

How to use this page

To help you prepare for your upgrade, we have combined the cross-family Access Management release notes onto one page. Read this summary of the new features, changes, and updated information for your product from Yokohama to Zurich.

Tip:

If there were no updates for a release notes section in a certain family release, we included a short note for your reference. For example, if a product did not have any updates in Tokyo, the row says "No updates for this release."

Important information for upgrading Access Management to Zurich

Before you upgrade to Zurich, review these pre- and post-upgrade tasks and complete the tasks as needed.


Release	Release notes
Yokohama	No updates for this release.
Zurich	No updates for this release.

New features

Between your current release family and Zurich, new features were introduced for Access Management.


Release	Release notes
Yokohama	Security data filters Security data Filters enable you to control who can access sensitive data by restricting access to authorized users, regardless of how the data is accessed. Security data filters are applied before query execution, ensuring restricted data never leaves the database and prevents data leakage at the query level. Filters integrate into queries for GlideRecordSecure, GlideRecordSandbox, and GlideAggregateSandbox by default. Related record access Related record access integrated into the ACL framework enhances access management by enabling administrators to enforce specific ACLs for related tables. This ensures users can only access records in related tables, such as costs, estimations, or tasks, based on their permissions for the parent table, like projects or cases. Combined with broader ACL capabilities, Related record access ensures consistent, granular, and enforceable
Zurich	Machine identity access controls Enforce fine-grained access to data via REST or SOAP endpoints using Machine Identity Access Controls. This feature enables you to define which integrations can access specific data, confirming that the integrations only have access to the resources they need. Scripting Governance Tool tool and role Review and help reduce the number of users with scripting privileges using the Scripting Governance Tool. This tool helps improve platform security with scripting governance based on user role. A new deny-by-default behavior is enforced for scripting unless you have the snc_required_script_writer_permission role. After an upgrade or zBoot, this role is automatically assigned via the Conditional Script Writer group. Datatype ACL Simplify and help reduce redundant ACL definitions with Datatype ACLs. Create a single ACL to target all table columns of a specific data type, streamlining access control configurations.

Changes

Between your current release family and Zurich, some changes were made to existing Access Management features.


Release	Release notes
Yokohama	No updates for this release.
Zurich	No updates for this release.

Removed

Between your current release family and Zurich, some Access Management features or functionality were removed.


Release	Release notes
Yokohama	No updates for this release.
Zurich	No updates for this release.

Deprecations

Between your current release family and Zurich, some Access Management features or functionality were deprecated.


Release	Release notes
Yokohama	No updates for this release.
Zurich	No updates for this release.

Activation information

Review information on how to activate Access Management.


Release	Release notes
Yokohama	Access Management is a ServiceNow AI Platform feature that is active by default.
Zurich	Access Management is a ServiceNow AI Platform feature that is active by default.

Additional requirements

If any additional requirements were introduced or changed for Access Management we have noted them here.


Release	Release notes
Yokohama	No updates for this release.
Zurich	No updates for this release.

Browser requirements

If any specific browser requirements were introduced or changed for Access Management we have noted them here.


Release	Release notes
Yokohama	No updates for this release.
Zurich	No updates for this release.

Accessibility information

Review details on accessibility information for Access Management, such as specific requirements or compliance levels.


Release	Release notes
Yokohama	No updates for this release.
Zurich	No updates for this release.

Localization information

If there are specific localization considerations for Access Management we have noted them here.


Release	Release notes
Yokohama	No updates for this release.
Zurich	No updates for this release.

Highlight information

If there are specific highlight considerations for Access Management we have noted them here.


Release	Release notes
Yokohama	Security Data Filters are a powerful new feature designed to restrict access to sensitive records based on roles or security attributes. This ensures only authorized users can view data, regardless of how the data is accessed. Related Record Access allows enforcement of consistent access rules across related tables, ensuring that users only see records associated with the data they are authorized to access. See Access Control List Rules for more information.
Zurich	Enforce access to data via REST or SOAP endpoints using the Machine Identity Access Controls, which helps improve security, governance, and auditability. Target all table columns of a given data type with a single ACL using Datatype ACLs. Govern scripting permissions with the Scripting Governance tool, a new base system deny-by-default behavior. See Access Control List Rules for more information.