- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-27-2025 06:58 AM
Hi,
user can't access the record of Request Item. I got below error message. I dont find any acl with sys_scope. How can I solve it? thank
Part of the query on sc_req_item has been ignored because of insufficient access for 'query_match' operation on sc_cat_item.sys_scope
Solved! Go to Solution.

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-30-2025 11:57 AM
If you only of out of the box ACLs on the sc_cat_item table I would put in a case with now support. I'm not sure why it would be doing a query_match error on sys_scope or why it is not selectable for you since i tis a field on the sc_cat_item table.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-27-2025 07:57 AM - edited 06-27-2025 07:58 AM
Hi Elvis,
error message shows that a query_match type ACL is applied on the field 'sys_scope' which I hope ACL will be '*.sys_scope'
steps to find which ACL is causing issue:
1. Start debug security and let another window open for logs
2. open the list view for sc_req_item
3. check the logs where ACL is failing for read.
You can either update the existing one or write a new query_match ACL for 'sc_cat_item.sys_scope' with your roles, will override earlier one and resolve your issue.
Please mark this response as correct or helpful if it assisted you with your question.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-27-2025 08:04 AM
Hi @Elvis7
put this filter in the acls and check if there is any acl
you can refer this to know about query match and query range
https://www.ikconsulting.com/post/understanding-servicenow-s-may-2025-query-range-acl-update-what-you-need-to-know
Please mark my answer as helpful/correct if it resolves your query.
Regards,
Chaitanya