---
sourceDocument: Australia Platform security
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/de-DE/platform-security

 Release :

    - australia

ft:locale :

    - de-DE

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# OOB (Out-of-Box) Security Attributes

# OOB (Out-of-Box) Security Attributes {#ariaid-title1}

* Freigeben Version: Australia
* 
* Aktualisiert 12. März 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 Minute Lesedauer

Commonly used, generalized Security Attributes roles ready for use.

## Overview {#oob-security-attributes__section_ubd_1kn_qzb}

The OOB(Out-of-Box) Security Attributes are an easy way to begin using and learning the capabilities of Security Attributes with a series of preconfigured Security Attribute roles. The OOB Security Attribute roles are commonly used
access control roles.

To create your own Security Attribute, or expand an OOB Security Attributes capabilities see [Compound Security Attributes](https://servicenow-prod.fluidtopics.net/J3HWqUGDrQ5pC48ajwhn4w#compound-security-attributes "Compound Security Attributes enable you to create consistent and reusable Security Attribute profiles suit your business needs")
{#oob-security-attributes__table_s2b_skn_qzb__entry__2}

| Attribute | Description |
|-|-|
| Group | User is member of a specified group |
| GroupExplicit | User is an explicit member of a specific group |
| HasAdminRole | User has the admin persona |
| Impersonating | User is impersonated |
| InteractiveSession | Current session interactive |
| LoggedIn | User is logged-in and authenticated |
| NetworkCriteria | Additional Network Criteria |
| Role | User has specific role |
| RoleExplicit | User has specific role explicitly defined |
[Tabelle : 1. OOB Security Attributes]

{#oob-security-attributes__table_s2b_skn_qzb}

## Security attributes for client session {#oob-security-attributes__section_vvt_nfw_vbc}

Following security attributes are added for client session (plugin: <kbd class="ph userinput">com.glide.client_session_security_attributes</kbd>):

* IsEmbeddedSession: The attribute is used in ServiceNow web embedded components.  
  Hinweis:  
  The IsEmbeddedSession is added as a security attribute only when the Embedded client Access plugin (<kbd class="ph userinput">com.glide.security.client_access</kbd>) is installed.
* IsIframeEmbeddedSession: The attribute is used in embedded iframe in third party portals. For example, Engagement messenger, Virtual Agent Web Client, Embedded Session, and so on.
* IsIntegrationAsAServiceSession: The attribute is used in messaging apps like Virtual Agent in teams, Virtual Agent in slack, Virtual Agent in whatapp.
* IsIntegrationAsAUserSession: The attribute is used in integration account user or web service user.
* Is Servicenow Web Session: The attribute is used in web interactive session.
* Is Mobile App Session: The attribute is used if the mobile_client property is true in the oauth_entity record.

{#oob-security-attributes__ul_zkc_bn2_5bc}  
Hinweis:  
You must use the IsIframeEmbeddedSession, IsIntegrationAsAServiceSession, and IsIntegrationAsAUserSession only while configuring client type for OAuth and SSO records. To learn more, see [Configure client type for OAuth and SSO records](https://servicenow-prod.fluidtopics.net/CqJdg2mz1NR~jBr9hkChqg "Configure the Client Type field for OAuth and SSO record related configurations.").

## Non-explicit and explicit behavior explained {#oob-security-attributes__section_kp5_3v5_qzb}

Security Attributes address nuanced permission needs with an explicit vs. non-explicit (inherited) evaluation of roles permissions.  

## Separate an IT persona access from HR role file access {#oob-security-attributes__example_pgc_4x5_qzb}

We will define a Security Attribute that enables Admin to see HR related files but does not allow the Admin file access. Presume the Admin role is not defined as part of the HR group, but is _______. The Role sees _______