Can I grant developers read permissions on a scoped application in App Engine Studio?

senon · ‎07-15-2025

Hi Experts！

Is it possible to set read-only access permissions to application files for developers in AES for scope applications?

A developer wants to develop application XXX based on application YYY. However, to prevent unintended changes to the YYY application files, the developer wants to set read-only access permissions to application files for the YYY application.

Best regard.

senon

senon · ‎07-18-2025

Unfortunately, we have found that a role to resolve this issue does not exist in the current version (Yokohama).

We consulted with the person in charge of App Engine at ServiceNow, and they confirmed that there is no role that grants read-only access to application files of a specific application for delegated developers.

While delegated development allows permissions to be configured via source control based on specific functionalities, granting development permissions just to reference an application also enables the creation and modification of application files.

At this time, neither App Engine nor delegated development provides functionality that meets the requirement of developing an application by referencing other applications.

元の投稿で解決策を見る

Ct111 · ‎07-15-2025

Open the table definition (e.g., in sys_db_object).

Under the "Application Access" tab:

Uncheck Can create, Can update, and Can delete.

You may allow Can read if App XXX needs to reference the records.

This makes data in App YYY read-only for external scoped applications like App XXX.

Utkarsh9 · ‎07-15-2025

Yes this is possible, you can restrict it based on roles with Read operation ACL. If you don't want to touch ACL's use Query Business rule to view records.

senon · ‎07-15-2025

@Ct111 @Utkarsh9

Thank you for your reply.
I wrote my question poorly and it may have been misleading.
I have edited my post, but I am looking for a way to give developers permission to only read application files for application YYY.

Is this possible?

Di Zhang · ‎07-15-2025

I suggest to add snc_read_only role to him