New hardening settings for baseline 8.0
concept brazil Updated Sep 10, 2026 2 min read new-hardening-settings-for-baseline-eight.md
New hardening settings have been released with Security Center baseline version 8.0.
- Enforce field-level ACLs on records created from the filtered list view UI query string
- Enable IAM and boundary checks for Amazon Bedrock access
- Enable Guardian for External Agents
- Enable Identity and Access Audit tool
- Validate MIME Type of Attachments from Inbound Emails
- Enable Jelly JS interpolation protection
- Prohibit Use of KBA as Single Factor for AI Voice
- Require Multi-Factor Authentication for AI Voice Agent
- Log Impersonation History
- Validate MIME type for multi-extension filenames and polyglot files
- Enable Jelly JS interpolation protection for nested expressions
- Enable Role Masking for Agents
- Disable adding default roles to skill ACLs
- Prevent Reuse of REST API Sessions in UI/Web
- Enable Anti-CSRF Token for Userperf
- Track Impersonation Events
- Disable Voice Chat Guest Impersonation
- Prevent OAuth Clients from Using Implicit Grant
- Enforce Scope Access Controls on New Tables
Parent Topic:New hardening settings
41 lines · 5.2 KB
--- title: New hardening settings for baseline 8.0 description: New hardening settings have been released with Security Center baseline version 8.0. locale: en-US canonical_url: https://www.servicenow.com/docs/r/platform-security/instance-security-hardening-settings/new-hardening-settings-for-baseline-eight.html release: brazil product: Instance Security Hardening Settings classification: instance-security-hardening-settings topic_type: concept last_updated: "2026-09-10" reading_time_minutes: 2 breadcrumb: [New hardening settings, Baseline versions, Hardening settings, Platform Security] --- # New hardening settings for baseline 8.0 New hardening settings have been released with Security Center baseline version 8.0. - [Enforce field-level ACLs on records created from the filtered list view UI query string](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-enforce-field-level-acls-on.md) - [Enable IAM and boundary checks for Amazon Bedrock access](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-enable-multiple-permission.md) - [Enable Guardian for External Agents](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-enable-guardian-for-external-agents.md) - [Enable Identity and Access Audit tool](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-enable-identity-and-access-audit-tool.md) - [Validate MIME Type of Attachments from Inbound Emails](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-validate-mime-type-of-attachments-from-inbound-emails.md) - [Enable Jelly JS interpolation protection](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-enable-jelly-js-interpolation-protection.md) - [Prohibit Use of KBA as Single Factor for AI Voice](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-prohibit-use-of-kba-as-single-factor-for-ai-voice.md) - [Require Multi-Factor Authentication for AI Voice Agent](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-require-multi-factor-authentication-for-ai-voice-agent.md) - [Log Impersonation History](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-log-impersonation-history.md) - [Validate MIME type for multi-extension filenames and polyglot files](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-validate-mime-type-for-multi.md) - [Enable Jelly JS interpolation protection for nested expressions](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-enable-jelly-js-interpolation-protection-for-nested-expressions.md) - [Enable Role Masking for Agents](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-enable-role-masking-for-agents.md) - [Disable adding default roles to skill ACLs](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-disable-adding-default-roles-to-skill-acls.md) - [Prevent Reuse of REST API Sessions in UI/Web](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-prevent-reuse-of-rest-api-sessions-in-ui-web.md) - [Enable Anti-CSRF Token for Userperf](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-enable-anti-csrf-token-for-userperf.md) - [Track Impersonation Events](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-track-impersonation-events.md) - [Disable Voice Chat Guest Impersonation](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-disable-voice-chat-guest-impersonation.md) - [Prevent OAuth Clients from Using Implicit Grant](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-prevent-oauth-clients-from-using-implicit-grant.md) - [Enforce Scope Access Controls on New Tables](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-enforce-scope-access-controls-on-new-tables.md) **Parent Topic:**[New hardening settings](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/hardening-settings-new.md)
| title | New hardening settings for baseline 8.0 |
| description | New hardening settings have been released with Security Center baseline version 8.0. |
| locale | en-US |
| canonical_url | https://www.servicenow.com/docs/r/platform-security/instance-security-hardening-settings/new-hardening-settings-for-baseline-eight.html |
| release | brazil |
| product | Instance Security Hardening Settings |
| classification | instance-security-hardening-settings |
| topic_type | concept |
| last_updated | 2026-09-10 |
| reading_time_minutes | 2 |
| breadcrumb | New hardening settingsBaseline versionsHardening settingsPlatform Security |