Restrict write access on system fields to admin users \[New in Security Center 7.0\]

---
title: Restrict write access on system fields to admin users \[New in Security Center 7.0\]
description: Use the glide.rest.table\_api.admin\_only\_sys\_fields system property to control write access the fields generated by the system.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/platform-security/instance-security-hardening-settings/sc-restrict-write-access-on-system-fields-to-admin-users.html
release: australia
product: Instance Security Hardening Settings
classification: instance-security-hardening-settings
topic_type: reference
last_updated: "2026-09-10"
reading_time_minutes: 1
breadcrumb: [Access control, Hardening settings, Platform Security]
---

# Restrict write access on system fields to admin users \[New in Security Center 7.0\]

Use the **glide.rest.table\_api.admin\_only\_sys\_fields** system property to control write access the fields generated by the system.

The **glide.rest.table\_api.admin\_only\_sys\_fields** property controls write access to these fields:

-   sys\_id
-   sys\_created\_by
-   sys\_created\_on
-   sys\_updated\_by
-   sys\_updated\_on

When this property is set to **true**, only an admin can write to these fields that are system-generated values. When the property is set to **false** or it doesn't exist in the System Properties \[sys\_properties\] table, users who have create or write access to a table can write to these system values using the [Table API](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/api-reference/c_TableAPI.md).

Set the property **glide.rest.table\_api.admin\_only\_sys\_fields** to **true** to prevent non-admin users from updating system fields on records.

## More information

<table id="table_hhv_dvg_1xb"><thead><tr><th>

Attribute

</th><th>

Description

</th></tr></thead><tbody><tr><td>

Configuration name

</td><td>

**glide.rest.table\_api.admin\_only\_sys\_fields**

</td></tr><tr><td>

Configuration type

</td><td>

System Properties \(/sys\_properties\_list.do\)

</td></tr><tr><td>

Data type

</td><td>

Boolean

</td></tr><tr><td>

Recommended value

</td><td>

true

</td></tr><tr><td>

Default value

</td><td>

false

</td></tr><tr><td>

Fallback value

</td><td>

false

</td></tr><tr><td>

Category

</td><td>

[Access control](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/instance-security-hardening-settings/sc-access-control.md)

</td></tr><tr><td>

Security risk

</td><td>

-   Severity score: 2.7
-   CVSS score: Low
-   Users without the admin role could update fields such as sys\_created\_by or sys\_updated\_on. This access can impact the integrity of the created or updated record metadata, making records appear as if they were created by another user or updated at a different time.

</td></tr><tr><td>

Functional impact

</td><td>

Any integrations or users without the admin role that use the Table API to create or update records and change these fields are impacted. These requests to the Table API set the query parameter **sysparm\_suppress\_auto\_sys\_field** to **false** and set those fields in the request body.

</td></tr><tr><td>

Dependencies and prerequisites

</td><td>

None

</td></tr></tbody>
</table>To learn more about adding or creating a system property, see [Add a system property](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-administration/t_AddAPropertyUsingSysPropsList.md).

**Parent Topic:**[Access control](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/instance-security-hardening-settings/sc-access-control.md)