New hardening settings for baseline 7.0

---
title: New hardening settings for baseline 7.0
description: New hardening settings have been released with Security Center baseline version 7.0.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/platform-security/instance-security-hardening-settings/new-hardening-settings-for-baseline-seven.html
release: brazil
product: Instance Security Hardening Settings
classification: instance-security-hardening-settings
topic_type: concept
last_updated: "2026-09-10"
reading_time_minutes: 2
breadcrumb: [New hardening settings, Baseline versions, Hardening settings, Platform Security]
---

# New hardening settings for baseline 7.0

New hardening settings have been released with Security Center baseline version 7.0.

-   [Enable Cross Scope Privilege Checks on Service Portal Form \[New in Security Center 7.0\]](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-enable-cross-scope-privilege-checks-on-service-portal-form.md)
-   [Validate query ACLs on Glide DB functions \[New in Security Center 7.0\]](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/validate-query-acls-on-glide-db-functions.md)
-   [Use Document Classification to limit publicly accessible documents \[New in Security Center 7.0\]](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-use-document-classification-to-limit-publicly-accessible-documents.md)
-   [Restrict write access on system fields to admin users \[New in Security Center 7.0\]](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-restrict-write-access-on-system-fields-to-admin-users.md)
-   [Require approval for agent-based Office 365 group membership changes \[New in Security Center 7.0\]](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-require-approval-for-agent-based-office-365-group-membership-changes.md)
-   [Exclude Sensitive Tables and Fields from Data Generation \[New in Security Center 7.0\]](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-exclude-sensitive-tables-and-fields-from-data-generation.md)
-   [Enforce Read Roles for Catalog Variable Search \[New in Security Center 7.0\]](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-enforce-read-roles-for-catalog-variable-search.md)
-   [Enforce valid query string choice \[New in Security Center 7.0\]](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-enforce-valid-query-string-choice.md)
-   [Restricted Binding functionality in Case Bearer authorization](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-restricted-binding-functionality-in-case-bearer-authorization.md)
-   [Disable resource owner password credentials \(ROPC\) in OAuth 2 token grants \[New in Security Center 7.0\]](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-disable-resource-owner-password-credentials-ropc-in-oauth-2-token-grants.md)
-   [Enforce certificate trust \[Updated in Security Center 1.3, removed in 2.0, added in 7.0\]](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-certificate-trust.md)
-   [Prevent usage of 3DES keys](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-prevent-usage-of-3des-keys.md)
-   [Allow HTML Links to Trusted Domains in the Description Fields of the Impact Workspace Module \[New in Security Center 7.0\]](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-allow-html-links-to-trusted.md)
-   [Ensure Contextual Search Do Not Contain An Unvalidated Redirect \[New in Security Center 7.0\]](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-ensure-contextual-search-do-not-contain-an-unvalidated-redirect.md)
-   [Sanitize HTML in the Description Fields of the Impact Workspace Module \[New in Security Center 7.0\]](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sanitize-html-in-the-description-fields-of-the-impact-workspace-module.md)

**Parent Topic:**[New hardening settings](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/hardening-settings-new.md)