---
sourceDocument: Australia Platform security
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/de-DE/platform-security

 Release :

    - australia

ft:locale :

    - de-DE

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Restrict Impersonation to Admin \[New in Security Center 2.0\]

# Restrict Impersonation to Admin \[New in Security Center 2.0\] {#ariaid-title1}

* Freigeben Version: Australia
* 
* Aktualisiert 12. März 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 Minute Lesedauer

The glide.sys.permissive.impersonate property can be used to
prevent non-admin roles from impersonating other users.
When the glide.sys.permissive.impersonate property is set to
false, only users with the admin role can impersonate other users. When this
property is set to true, users may be able to make use of application components
that expose impersonation APIs to impersonate a user of higher privilege. This could
result in unauthorized access if these application components are misconfigured
because non-admin users can access the Impersonation functionality.

You may want to set the property to the non-default value when you need non-admin
users to have the capability to impersonate other users.  
Warnung:  
This is a safe harbor property, meaning the value can't be altered once it's changed. It is non-revertible.

## More information {#sc_restrict_impersonation_to_admin__section_qhx_1b1_xwb}

{#sc_restrict_impersonation_to_admin__table_ajc_b43_3kb__entry__2}

| Attribute | Description |
|-|-|
| Configuration name | glide.sys.permissive.impersonate |
| Configuration type | System Properties (/sys_properties_list.do) |
| Data type | Boolean |
| Recommended value | false |
| Default value | false |
| Category | [Access control](https://servicenow-prod.fluidtopics.net/xAmazkRh5FKyeb7q4TQGWw "The access control category audits the process of protecting resources from unauthorized access through granting and denying requests based on a permission model. This includes ensuring an entity accessing a resource holds valid credentials to do so, creating and protecting a well-defined set of roles or permissions and ensuring role or permission controls are protected from replay and tampering.") |
| Security risk | * Severity score: 6.7 * CVSS score: Medium * Security risk details: Failing to set this property to the recommended value of false may allow a non-admin user to utilize application components that expose APIs, enabling them to impersonate a user with higher privileges. {#sc_restrict_impersonation_to_admin__ul_g1g_3sf_xwb} |
| Dependencies and prerequisites | None |
| Functional impact | Non-admin users can access Impersonation features with some customizations to other scripts and UI pages. However, it is essential to ensure that only the correct users are granted access to these features. Hinweis: When glide.sys.permissive.impersonate is set to true, Non-admin users with the impersonate role can still impersonate. |
[ ]

{#sc_restrict_impersonation_to_admin__table_ajc_b43_3kb}