---
sourceDocument: Australia Platform security
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/de-DE/platform-security

 Release :

    - australia

ft:locale :

    - de-DE

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Disable Adding Default Roles to Skill ACLs

# Disable Adding Default Roles to Skill ACLs {#ariaid-title1}

* Freigeben Version: Australia
* 
* Aktualisiert 12. März 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 Minute Lesedauer

Use system properties to control what roles are automatically added to generative AI skill ACLs.
Use the com.glide.one_extend.include_default_roles_for_skill_acl system property to control whether roles are automatically added to generative AI skill ACLs when they're created or updated via the
global.GenAiSkilSecurityUtils API. This property is used by the Now Assist Skill Kit (NASK) to enforce consistent security policies across all AI skills.

When a skill ACL is inserted or updated, the default roles defined in the com.glide.one_extend.default_roles_for_skill_acl system property are automatically included. This addition ensures that certain
privileged roles always have access to execute the skills. The com.glide.one_extend.default_roles_for_skill_acl property may contain a comma-separated list of roles.

Ensure that the com.glide.one_extend.include_default_roles_for_skill_acl is set to <kbd class="ph userinput">false</kbd>, or that the property doesn't exist on the System Properties \[sys_properties\] table.

## More information {#sc-disable-adding-default-roles-to-skill-acls__section_wm4_vkk_xhc}

{#sc-disable-adding-default-roles-to-skill-acls__table_ajc_b43_3kb__entry__2}

| Attribute | Description |
|-|-|
| Configuration name | com.glide.one_extend.include_default_roles_for_skill_acl |
| Configuration type | System Properties (/sys_properties_list.do) |
| Data type | Boolean |
| Recommended value | false |
| Default value | false |
| Fallback value | false |
| Category | [Access control](https://servicenow-prod.fluidtopics.net/xAmazkRh5FKyeb7q4TQGWw "The access control category audits the process of protecting resources from unauthorized access through granting and denying requests based on a permission model. This includes ensuring an entity accessing a resource holds valid credentials to do so, creating and protecting a well-defined set of roles or permissions and ensuring role or permission controls are protected from replay and tampering.") |
| Security risk | * Severity score: 4.2 * CVSS score: Medium * Security risk details: Roles are automatically added to Generative AI Skill ACLs when this feature is enabled. Depending on the role, this may allow overly broad access to certain skills and override intended ACL behavior. {#sc-disable-adding-default-roles-to-skill-acls__ul_g1g_3sf_xwb} |
| Functional impact | Certain roles may be prevented from using skills if they don't satisfy an existing access control. These two property configurations ensure certain roles retain a base level of access to all skills. |
| Dependencies and prerequisites | None |
[ ]

{#sc-disable-adding-default-roles-to-skill-acls__table_ajc_b43_3kb}