Which ACL option controls users access to Group By functionality on list view of a table ?

[Mark Newman]

 I have creates three new tables and let Servicenow create it's own roles which in turn has created default read/write/create/delete ACLS. However, users with those new roles aren't able to user Group By on the columns in list view despite the fields being listed as groupable in Tables & Columns.

 Two errors that come up in a red banner are:

part of the query on sn_customerservice_cost_inventory_items has been ignored because of insufficient access for 'query_range' operation on sn_customerservice_cost_inventory_items.u_supplier

Security prevents reading Supplier - no records displayed.

Am I missing another ACL ? Or missed something obvious ?

 The Access Analyzer shows :

[Naveen20 · Accepted solution]

Try these 2 things and check once

1. Create field-level query_range ACLs — You need ACL records for sn_customerservice_cost_inventory_items.u_supplier (and any other fields users need to Group By) for the query_range operation. Assign your custom roles to these ACLs. Alternatively, create a wildcard field ACL: sn_customerservice_cost_inventory_items.* for query_range with your role, which covers all fields on that table.
2. Check ACLs on the referenced table — The "Security prevents reading Supplier" error means the user also lacks read access to whatever table u_supplier references. When you Group By a reference field, ServiceNow needs to read the referenced records to display the grouped values. Make sure your users have at least read access to the supplier table (likely core_company or a custom table).