How to allow my application to delete records from sys_user_grmember.

[Christopher Lun]

By default my App cannot delete records from sys_user_grmember. I am new to SNOW app development. I am wondering if there is a way to give access to my app to delete, so that I can run some scripted APIs and removes users from groups. I am running my API request from a user admin. Also, I created an app_admin_role in the app, but I am not sure how to give it the right permissions.

[Christopher Lun]

I can check the "Can Delete" in the global, but the intended purpose is that people install the app and be able to used the scripted APIs without them having to tinker with their own instances. 

[Ankur Bawiskar · Accepted solution]

Hi,

Unless the Can delete is checked you cannot delete records even using GlideRecord from scope outside global

Regards
Ankur

[Christopher Lun]

Just to understand correctly. I would have to intruct the clients that they need to select Can Delete on the table for our Scripted Rested API to work.