SNOW-16.1: Agent Action Without Role Gate
🔴 High · ServiceNow Role-Based Access
Detects agent tool scripts that perform privileged operations without gs.hasRole() or GlideUser.isMemberOf() checks, relying solely on ACLs.
Details
| Field | Value |
|---|---|
| Rule ID | SNOW-16.1 |
| Severity | High |
| Category | ServiceNow Role-Based Access |
| Platforms | servicenow |
Remediation
Refer to the SquireX documentation for
remediation guidance specific to SNOW-16.1.