Part of the query on sys_user has been ignored because of insufficient access for 'query_match'

[Akshay Pithore]

Hi Team,

I am facing the issue with Reference field dependent on assignment group. When I click on reference field's search ICON.

We got one error (Part of the query on sys_user_grmember has  has been ignored because of insufficient access for 'query_match' operation on sys_user_grmember.group) like below.

 let us know why this is happening and what was the solution.

This very urgent. Please respond on this ASAP.

Kind regards,

Akshay Pithore

[lpruit2]

Greetings @Akshay Pithore. This error message sounds like an Access Control (ACL) issue. I'll include a link to ServiceNow documentation that better describes the "query_match" ACL. 

Query ACLs

To view your ServiceNow environment's ACLs, you can go to All > System Security > Access Control (ACL).

I'm not sure if your ServiceNow environment has made any customizations to the Group Member table, but you can do a search within this table where "nameSTARTSWITHsys_user_grmember.group". If there is an existing ACL with the Operation type of "query_match", you can click into that ACL record to see which Role the ACL is mapped to. From here, you can verify if the impacted user(s) have been assigned this Role or not.

If there is NOT An existing ACL with the Operation type of "query_match", you may need to have a new ACL created. In order to do this, you will need to elevate your access rights to Security Admin (security_admin). 

I'll include a link to ServiceNow documentation that goes into more detail about the process of creating a new ACL. 

Create an ACL

I hope this information is helpful!

[nayanmule]

create a new query range acl for same table , same field and give minimum role like snc_internal something 

[BhupeshG]

https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB2212080

Mark correct if this helps