Zero Trust Access system properties

---
title: Zero Trust Access system properties
description: Use system properties to enable and customize Zero Trust Access to meet your security requirements.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/platform-security/session-access-system-properties.html
release: australia
topic_type: reference
last_updated: "2026-09-10"
reading_time_minutes: 1
breadcrumb: [Zero Trust Access, Access Management]
---

# Zero Trust Access system properties

Use system properties to enable and customize Zero Trust Access to meet your security requirements.

## Properties

\[Omitted image "session-access-system-properties.png"\] Alt text: Zero Trust Access Properties

<table id="table_vkg_2wf_twb"><thead><tr><th>

Property

</th><th>

Description

</th></tr></thead><tbody><tr><td>

Enable Zero Trust Session Access

</td><td>

Option that enables administrators to use the Zero Trust Session Access feature. By default the value is `false`.

</td></tr><tr><td>

Enable debug logging for Zero Trust Session Access

</td><td>

Option to enable debug logging for Zero Trust Session Access.

</td></tr><tr><td>

Preference to remove/limit roles in case of conflict. Whenever a common role is part of both remove and limit role\(s\) set, the precedence is decided based on this property.

</td><td>

**Remove Roles** or **Limit Roles**

</td></tr><tr><td>

The number of days after which session access audit data will be deleted. The default value is 30 days and the maximum is 180 days.

</td><td>

By default, it’s 30 days.

</td></tr><tr><td>

The number of seconds after which the refresh token will be revoked if the session access policy is using IDP attributes. It should be between access token lifespan and refresh token lifespan. The default value is 1800 seconds.

</td><td>

By default, it’s 1800 seconds.

</td></tr><tr><td>

Information to be displayed when some privileges have been removed from the session for a user.

</td><td>

Description that you want to display to your users regarding limiting or removal of privileges. Sample Description:`Based on security policies defined by the administrator, some of your roles have been removed from this session. Please get in touch with your administrator for more information.`

</td></tr></tbody>
</table>The `glide.authenticate.session_access.user_info_message` property supports translation for the default message only. The default message is delivered through a `sys_ui_message` record and is automatically displayed in the user's selected language.

If you modify this property to use a custom message and require it to appear in languages other than English, you must define the translations manually. For each language, create a `sys_ui_message` record with the following values:

-   **Code**: `session_access_info_message_code`
-   **Key**: Identical to the value configured in the property
-   **Message**: The translated text of the property value for that language

Use the default English `sys_ui_message` record \(Code: `session_access_info_message_code`\) as a reference template. After the records are created, the custom message is displayed in the corresponding language at login when a user's session access is reduced.