<h2>Limit attachment file size</h2><br/><div style="overflow-x:auto"> <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head><meta content="text/html; charset=UTF-8" /><meta name="copyright" content="(C) Copyright 2025" /><meta name="DC.rights.owner" content="(C) Copyright 2025" /><meta name="generator" content="DITA-OT" /><meta name="DC.type" content="task" /><meta name="DC.title" content="Configure attachment system properties" /><meta name="abstract" content="You can disable the drag-and-drop feature. (Users can still upload attachments by browsing to the file.) You can also limit the attachment file size, restrict who can upload attachments, and restrict what file extensions can be uploaded." /><meta name="description" content="You can disable the drag-and-drop feature. (Users can still upload attachments by browsing to the file.) You can also limit the attachment file size, restrict who can upload attachments, and restrict what file extensions can be uploaded." /><meta name="DC.subject" content="drag-and-drop, feature, disabling, file size, attachment, limiting, file size, file size, file, role, attachments, restrict file extensions" /><meta name="keywords" content="drag-and-drop, feature, disabling, file size, attachment, limiting, file size, file size, file, role, attachments, restrict file extensions" /><meta name="DC.relation" scheme="URI" content="../../../administer/form-administration/reference/r_AdministeringAttachments.html" /><meta name="DC.relation" scheme="URI" content="../../../administer/general/concept/intro-now-platform-landing.html" /><meta name="DC.relation" scheme="URI" content="../../../administer/general/concept/config-now-platform-core-features.html" /><meta name="DC.relation" scheme="URI" content="../../../administer/general/concept/now-platform-forms-fields-lists.html" /><meta name="DC.relation" scheme="URI" content="../../../administer/form-administration/concept/form-administration.html" /><meta name="DC.creator" content="ServiceNow" /><meta name="DC.date.created" content="2023-08-03" /><meta name="DC.date.modified" content="2024-08-01" /><meta name="DC.format" content="XHTML" /><meta name="DC.identifier" content="t_DisablingTheDragAndDropFeature" /><link rel="stylesheet" type="text/css" href="../../../CSS/commonltr.css" /><title>Configure attachment system properties</title></head><body> <div class="nested0" id="t_DisablingTheDragAndDropFeature"> <h1 class="title topictitle1" id="ariaid-title1">Configure attachment system properties</h1> <div class="body taskbody"><p class="shortdesc">You can disable the drag-and-drop feature. (Users can still upload attachments by browsing to the file.) You can also limit the attachment file size, restrict who can upload attachments, and restrict what file extensions can be uploaded.</p> <div class="section prereq p" id="t_DisablingTheDragAndDropFeature__prereq_gj2_z5z_51b">Role required: admin<div class="p"><div class="note"><span class="notetitle">Note:</span> To learn more about the properties that affect attachments processing, see <span class="xref">Attachments (instance security hardening)</span> in Instance Security Hardening Settings.</div> </div> </div> <ol class="ol steps"><li class="li step"> <span class="ph cmd">To disable the drag-and-drop features, navigate to <span class="ph menucascade"><span class="ph uicontrol">System Properties</span> > <span class="ph uicontrol">UI Properties</span></span>.</span> </li><li class="li step"> <span class="ph cmd">Clear the check box for the <span class="ph uicontrol">Allow attachment drag and drop in supported HTML5 browsers</span> property.</span> </li><li class="li step"> <span class="ph cmd">Click <span class="ph uicontrol">Save</span>.</span> </li></ol> </div> <div class="related-links"> <div class="familylinks"> <div class="parentlink"><strong>Parent Topic:</strong> <a class="link" href="../../../administer/form-administration/reference/r_AdministeringAttachments.html" title="Administrators can configure system properties for how files are uploaded and attached to records. Uploading, viewing, and deleting file attachments triggers a single event that can be used for notifications or in scripts.">Administering attachments</a></div> </div> </div><div class="topic task nested1" id="t_LimitingAttachmentFileSize"> <h2 class="title topictitle2" id="ariaid-title2">Limit attachment file size</h2> <div class="body taskbody"><p class="shortdesc">You can specify the maximum size allowable for attachments to avoid issues with the user's active session on the instance. The maximum attachment size for email attachments is configured separately.</p> <div class="section prereq p" id="t_LimitingAttachmentFileSize__prereq_gj2_z5z_51b">Role required: Admin.</div> <div class="section context"> <div class="note"><span class="notetitle">Note:</span> The maximum attachment size for email attachments is configured separately.</div> </div> <ol class="ol steps"><li class="li step stepexpand"> <span class="ph cmd">Navigate to <span class="ph menucascade"><span class="ph uicontrol">All</span> > <span class="ph uicontrol">System Properties</span> > <span class="ph uicontrol">Security</span></span>.</span> </li><li class="li step stepexpand"> <span class="ph cmd">Enter a value in the <span class="ph uicontrol">Maximum file attachment size in megabytes</span> property.</span> <div class="itemgroup info">The system only allows attachment sizes up to 1 GB. By default, this field is blank. If you leave this field blank, the system uses the default maximum limit of 1 GB.</div> </li><li class="li step stepexpand"> <span class="ph cmd">Click <span class="ph uicontrol">Save</span>.</span> </li></ol> </div> </div> <div class="topic task nested1" id="t_RequiringARoleToAttachFiles"> <h2 class="title topictitle2" id="ariaid-title3">Require a role to attach files</h2> <div class="body taskbody"><p class="shortdesc">You can restrict who can upload attachments.</p> <div class="section prereq p" id="t_RequiringARoleToAttachFiles__prereq_gj2_z5z_51b">Role required: Admin.</div> <ol class="ol steps"><li class="li step stepexpand"> <span class="ph cmd">Navigate to <span class="ph menucascade"><span class="ph uicontrol">All</span> > <span class="ph uicontrol">System Properties</span> > <span class="ph uicontrol">Security</span></span>.</span> </li><li class="li step stepexpand"> <span class="ph cmd">In the <span class="ph uicontrol">Attachment limits and behavior</span> section, locate the <span class="ph uicontrol">List of roles (comma-separated) that can create attachments</span> property (<span class="keyword parmname">glide.attachment.role</span>).</span> </li><li class="li step stepexpand"> <span class="ph cmd">Enter one or more roles separated by commas.</span> <div class="itemgroup info">Only roles listed in this property are able to upload attachments to a record. If no roles are entered, then all roles can upload attachments.</div> </li><li class="li step stepexpand"> <span class="ph cmd">Click <span class="ph uicontrol">Save</span>.</span> </li></ol> </div> </div> <div class="topic task nested1" id="t_RestrictingFileExtensions"> <h2 class="title topictitle2" id="ariaid-title4">Restrict attachment file extensions</h2> <div class="body taskbody"><p class="shortdesc">The <span class="keyword parmname">glide.attachment.extensions</span> property restricts the file extensions that users can upload as attachments.</p> <div class="section prereq p" id="t_RestrictingFileExtensions__prereq_gj2_z5z_51b">Role required: Admin.</div> <div class="section context">Restrict attachment file extensions to prevent users from uploading invalid file types and file types that may be more likely than others to contain viruses or malware.<div class="note"><span class="notetitle">Note:</span> This property does not restrict attachments based on the actual file type, only based on the extension. To enable MIME type validation, which validates that the MIME type of a file matches the file extension and can block attachments that do not pass this validation, see <span class="xref"></span>.</div> </div> <ol class="ol steps"><li class="li step stepexpand"> <span class="ph cmd">Navigate to <span class="ph menucascade"><span class="ph uicontrol">All</span> > <span class="ph uicontrol">System Properties</span> > <span class="ph uicontrol">Security</span></span>.</span> </li><li class="li step stepexpand"> <span class="ph cmd">In the <span class="ph uicontrol">Attachment limits and behavior</span> section, locate the <span class="ph uicontrol">List of file extensions (comma-separated) that can be attached to documents via the attachment dialog</span> property.</span> </li><li class="li step stepexpand"> <span class="ph cmd">Enter the file extensions and click <span class="ph uicontrol">Save</span>.</span> <div class="itemgroup info">If no extensions are specified, then all extensions are allowed. However, if any extensions are specified, all unlisted extensions are restricted. Listed extensions should not include the dot (.) prefix or spaces after commas. For example, enter xls,xlsx,doc,docx.</div> </li></ol> </div> </div> </div> </body></html></div>