Restrict delegated developers read access \[Updated in Security Center 1.3\]

reference australia Updated Sep 10, 2026 1 min read sc-delegated-developers-read-access-allowlist.md
Raw file servicenow.com

If com.glide.dd_allow_global_access_tables does not contain the recommended value of wf_activity, wf_activity_definition, wf_workflow, wf_workflow_version, sp_portal, sp_widget, and sp_page, then those tables could be read by a delegated developer. This could provide the delegated developer read access to sensitive information.

More information

Attribute

Description

Property name

com.glide.dd_allow_global_access_tables

Configuration type

System Properties (/sys_properties_list.do)

Data type

string

Recommended value

wf_activity, wf_activity_definition, wf_workflow, wf_workflow_version, sp_portal, sp_widget, sp_page

Default value

wf_activity, wf_activity_definition, wf_workflow, wf_workflow_version, sp_portal, sp_widget, sp_page

Category

Access control

Security risk

  • Severity score: 2.7
  • CVSS score: Low
  • Security risk details: Ensure that com.glide.dd_allow_global_access_tables is set to wf_activity, wf_activity_definition, wf_workflow, wf_workflow_version, sp_portal, sp_widget, sp_page.
**Parent Topic:**[Access control](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/instance-security-hardening-settings/sc-access-control.md)
Search documentation
Search document titles and file paths on the australia branch