---
sourceDocument: Australia Platform security
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/de-DE/platform-security

 Release :

    - australia

ft:locale :

    - de-DE

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Restrict write access on system fields to admin users \[New in Security Center 7.0\]

# Restrict write access on system fields to admin users \[New in Security Center 7.0\] {#ariaid-title1}

* Freigeben Version: Australia
* 
* Aktualisiert 12. März 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 Minute Lesedauer

Use the glide.rest.table_api.admin_only_sys_fields system property to control write access the fields generated by the system.
The glide.rest.table_api.admin_only_sys_fields property controls write access to these fields:

* sys_id
* sys_created_by
* sys_created_on
* sys_updated_by
* sys_updated_on

{#sc-restrict-write-access-on-system-fields-to-admin-users__ul_uwq_3kp_qfc}

When this property is set to true, only an admin can write to these fields that are system-generated values. When the property is set to false or it doesn't exist in the System
Properties \[sys_properties\] table, users who have create or write access to a table can write to these system values using the [Table API](https://www.servicenow.com/docs/access?context=c_TableAPI&version=australia&pubname=australia-api-reference&ft:locale=en-US).

Set the property glide.rest.table_api.admin_only_sys_fields to true to prevent non-admin users from updating system fields on records.

## More information {#sc-restrict-write-access-on-system-fields-to-admin-users__section_lnh_pkf_32c}

{#sc-restrict-write-access-on-system-fields-to-admin-users__table_hhv_dvg_1xb__entry__2}

| Attribute | Description |
|-|-|
| Configuration name | glide.rest.table_api.admin_only_sys_fields |
| Configuration type | System Properties (/sys_properties_list.do) |
| Data type | Boolean |
| Recommended value | true |
| Default value | false |
| Fallback value | false |
| Category | [Access control](https://servicenow-prod.fluidtopics.net/xAmazkRh5FKyeb7q4TQGWw "The access control category audits the process of protecting resources from unauthorized access through granting and denying requests based on a permission model. This includes ensuring an entity accessing a resource holds valid credentials to do so, creating and protecting a well-defined set of roles or permissions and ensuring role or permission controls are protected from replay and tampering.") |
| Security risk | * Severity score: 2.7 * CVSS score: Low * Users without the admin role could update fields such as sys_created_by or sys_updated_on. This access can impact the integrity of the created or updated record metadata, making records appear as if they were created by another user or updated at a different time. {#sc-restrict-write-access-on-system-fields-to-admin-users__ul_ihv_dvg_1xb} |
| Functional impact | Any integrations or users without the admin role that use the Table API to create or update records and change these fields are impacted. These requests to the Table API set the query parameter sysparm_suppress_auto_sys_field to false and set those fields in the request body. |
| Dependencies and prerequisites | None |
[ ]

{#sc-restrict-write-access-on-system-fields-to-admin-users__table_hhv_dvg_1xb}

To learn more about adding or creating a system
property, see [Add a system property](https://www.servicenow.com/docs/access?context=t_AddAPropertyUsingSysPropsList&version=australia&pubname=australia-platform-administration&ft:locale=en-US).