---
sourceDocument: Australia Platform security
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/de-DE/platform-security

 Release :

    - australia

ft:locale :

    - de-DE

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Restrict Global App Development by Role \[New in Security Center 2.0\]

# Restrict Global App Development by Role \[New in Security Center 2.0\] {#ariaid-title1}

* Freigeben Version: Australia
* 
* Aktualisiert 12. März 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 Minute Lesedauer

Use the sn_g_app_creator.allow_global property to control which
users can create applications in the global scope using the Guided Application
Creator.
If sn_g_app_creator.allow_global is set to the recommended value
of false, users require the sn_g_app_creator.global role to
create applications in the global scope. Conversely, if set to the insecure value of
true, any user with the basic sn_g_app_creator.app_creator role can create global
applications. Global applications lack scope protection, allowing developers access
to extensive features and functions beyond specific scopes. Restricting global
application development to users with the additional role adheres to the principle
of least privilege.  
Hinweis:  
This property does not come pre-configured in your instance. You must manually create and configure this property according to your organization's needs.

## More information {#sc_restrict_global_app_development_by_role__section_qhx_1b1_xwb}

{#sc_restrict_global_app_development_by_role__table_ajc_b43_3kb__entry__2}

| Attribute | Description |
|-|-|
| Configuration name | sn_g_app_creator.allow_global |
| Configuration type | System Properties (/sys_properties_list.do) |
| Data type | Boolean |
| Recommended value | false |
| Default value | false |
| Category | [Access control](https://servicenow-prod.fluidtopics.net/xAmazkRh5FKyeb7q4TQGWw "The access control category audits the process of protecting resources from unauthorized access through granting and denying requests based on a permission model. This includes ensuring an entity accessing a resource holds valid credentials to do so, creating and protecting a well-defined set of roles or permissions and ensuring role or permission controls are protected from replay and tampering.") |
| Security risk | * Severity score: 3.3 * CVSS score: Low * Security risk details: Failing to set this property to the recommended value could allow any user with the sn_g_app_creator.app_creator role to create global applications, which does not adhere to the principle of least privilege. {#sc_restrict_global_app_development_by_role__ul_g1g_3sf_xwb} |
| Dependencies and prerequisites | None |
| Functional impact | Enhanced the API (/api/now/templates) to validate the create global application ACL and property. |
[ ]

{#sc_restrict_global_app_development_by_role__table_ajc_b43_3kb}