The requested flow operation was prohibited by security rules

[yoli1]

Hello all i get this error The requested flow operation was prohibited by security rules in Flow Designer for update record action any help?

[Dr Atul G- LNG]

Hi @yoli1 

https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB0870023

https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB0861909

Additional Information

KB0754165 - Creating a SC task record and displaying variables in the variable editor while running ...

KB0821099 - CRUD action/step action fails with "The requested flow operation was prohibited by secur...

KB0870023 - Flow Designer Create Task results in error: The requested flow operation was prohibited ...

Resolution

For this to work you need write access on the table sc_item_variables_task. There currently is no ACL to do this so unless you're an admin the user will see that error. If you create an ACL for catalog_admin and give write access to sc_item_variables_task the error will not happen.

Resolution

To resolve the issue, Check the user's profile who is starting the flow, execute the flow as System User, or look at the ACLs the system has configured to limit users.

[Dr Atul G- LNG]

Hi @yoli1 

One more

https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB0861124

Resolution

Please delete this user record with sys_id = system and test again, the error would not occur.

[Amit Verma]

Hi @yoli1 

Please check in the flow properties if you have enabled the flow to run as a System User or via User who initiates session ? Please configure it to run as System User and try again. It is because of the ACLs being enforced while the Update operation being performed by the flow on the record under the context of the user who initiates the flow execution.

Thanks & Regards

Amit Verma

[yoli1]

Hello @Amit Verma  the update action copies closed comments to the activity stream. I don't want the flow to run as the system user; instead, it is configured to run as the 'User who initiates the session.' This way, the comments in the activity stream will show as the user who added the comment, not as 'System'

any ideas?