Deleted hardening settings for baseline version 4.0
concept brazil Updated Nov 6, 2026 1 min read deleted-hardening-settings-for-version-four.md
Some hardening settings have been removed with the release of Security Center baseline version 4.0.
- LDAP Initial Password
- Mobile Offline Roles
- Restrict Access to Critical Data through Zero Trust Access Policies (Plugin Applicability: Adaptive Authentication)
- Read Only Tables Allowlist For Write
- Allowed JDBC Probe Operations (Plugin Applicability: MID Server)
- Set Allowed Domains which Create Users from Incoming Emails
- Set Complex "Default" Password
- Accessible Properties in GraphQL Allowlist
- Cross Origin Messaging Allowlist
- Limit Attachment Size in Training and Prediction Flows for GraphQL Enpoints (Plugin Applicability: Platform Document Intelligence)
- Edit Content Roles Allowlist (Plugin Applicability: Communities)
- Ensure Database Queries Do Not Trigger a OutofMemory Exception Due to Query Size
- Role Allowlist for Script Execution
- Downloadable File Type Allowlist
- Read Only Tables Allowlist For Delete
- Enforce Authentication for Roleless ACL
- Minimize LDAP One-Time Token Expiry Time
- Allow Only Trusted IP Addresses for Authentication
- Set Mobile Password Reset URL
- Password Complexity of Service Accounts (Plugin Applicability: Service Bridge)
- Notify Users During Password Reset/Change Process
- Enforce Application Scope Restrictions
- Access Control Requirements (Plugin Applicability: Communities)
- Record History Access Role Allowlist
- Restrict Role Access for Attachments
- Only Allow PDFs from Predefined List of Trusted URLs
- Prevent Emailing One-Time Password During LDAP Server Outage
- Convert Inbound Email Images to Attachments
- Review Extraneous Explicit Role Access Control Condition
Parent Topic:Deleted hardening settings
51 lines · 2.6 KB
--- title: Deleted hardening settings for baseline version 4.0 description: Some hardening settings have been removed with the release of Security Center baseline version 4.0. locale: en-US canonical_url: https://www.servicenow.com/docs/r/platform-security/instance-security-hardening-settings/deleted-hardening-settings-for-version-four.html release: brazil product: Instance Security Hardening Settings classification: instance-security-hardening-settings topic_type: concept last_updated: "2026-11-06" reading_time_minutes: 1 breadcrumb: [Deleted hardening settings, Baseline versions, Hardening settings, Platform Security] --- # Deleted hardening settings for baseline version 4.0 Some hardening settings have been removed with the release of Security Center baseline version 4.0. - LDAP Initial Password - Mobile Offline Roles - Restrict Access to Critical Data through Zero Trust Access Policies \(Plugin Applicability: Adaptive Authentication\) - Read Only Tables Allowlist For Write - Allowed JDBC Probe Operations \(Plugin Applicability: MID Server\) - Set Allowed Domains which Create Users from Incoming Emails - Set Complex "Default" Password - Accessible Properties in GraphQL Allowlist - Cross Origin Messaging Allowlist - Limit Attachment Size in Training and Prediction Flows for GraphQL Enpoints \(Plugin Applicability: Platform Document Intelligence\) - Edit Content Roles Allowlist \(Plugin Applicability: Communities\) - Ensure Database Queries Do Not Trigger a OutofMemory Exception Due to Query Size - Role Allowlist for Script Execution - Downloadable File Type Allowlist - Read Only Tables Allowlist For Delete - Enforce Authentication for Roleless ACL - Minimize LDAP One-Time Token Expiry Time - Allow Only Trusted IP Addresses for Authentication - Set Mobile Password Reset URL - Password Complexity of Service Accounts \(Plugin Applicability: Service Bridge\) - Notify Users During Password Reset/Change Process - Enforce Application Scope Restrictions - Access Control Requirements \(Plugin Applicability: Communities\) - Record History Access Role Allowlist - Restrict Role Access for Attachments - Only Allow PDFs from Predefined List of Trusted URLs - Prevent Emailing One-Time Password During LDAP Server Outage - Convert Inbound Email Images to Attachments - Review Extraneous Explicit Role Access Control Condition **Parent Topic:**[Deleted hardening settings](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/hardening-settings-deleted.md)
| title | Deleted hardening settings for baseline version 4.0 |
| description | Some hardening settings have been removed with the release of Security Center baseline version 4.0. |
| locale | en-US |
| canonical_url | https://www.servicenow.com/docs/r/platform-security/instance-security-hardening-settings/deleted-hardening-settings-for-version-four.html |
| release | brazil |
| product | Instance Security Hardening Settings |
| classification | instance-security-hardening-settings |
| topic_type | concept |
| last_updated | 2026-11-06 |
| reading_time_minutes | 1 |
| breadcrumb | Deleted hardening settingsBaseline versionsHardening settingsPlatform Security |