Enforce ACL on HR lifecycle events data

reference australia Updated Sep 10, 2026 1 min read sc-enforce-acl-on-hr-lifecycle-events-data.md
Raw file servicenow.com

Learn how to prevent unauthorized access to data in the Human Resources Lifecycle Events application by verifying that the glide.enforce_security_scope.sn_hr_le property is set to the secured value.

The glide.enforce_security_scope.sn_hr_le property limits the access control lists (ACLs) of several HR tables so that only the "sn_hr_le" scope is considered. If glide.enforce_security_scope.sn_hr_le isn’t set to the recommended value of true, then the data from the Human Resources: Lifecycle Events application will be exposed to ACLs from all other scopes which could lead to unauthorized users accessing sensitive data. For example, an IT administrator gaining access to HR data.

Warning: This is a safe harbor property, meaning the value can't be altered once it's changed. It is non-revertible.

More information

Attribute

Description

Configuration name

glide.enforce_security_scope.sn_hr_le

Configuration type

System Properties (/sys_properties_list.do)

Data type

Boolean

Recommended value

true

Default value

false

Category

Access control

Security risk

  • Severity score: 6.5
  • CVSS score: Medium
  • Security risk details: Not setting this property to the value of true, could cause the Human Resources: Lifecycle Events application data to be exposed to ACLs from all other scopes. This could lead to unauthorized users accessing sensitive data.

Dependencies and prerequisites

None

**Parent Topic:**[Access control](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/instance-security-hardening-settings/sc-access-control.md)
Search documentation
Search document titles and file paths on the australia branch