Widget - SnRecordePicker Role Issue
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎09-28-2025 10:33 PM
Hi,
I am working on a custom application. I have a widget where I am using SnRecordPicker to show the list of users based on some filters. As an Admin, I am able to see the users in the field. But when an ITIL User is trying to access the field they are not able to see any users (Just showing 'Searching').
When I checked the network Console I am getting below error-
{
"error": {
"message": "Insufficient rights to query records",
"detail": "Field(s) present in the query do not have permission to be read"
},
"status": "failure"
}
After some research I got to know this is happening because of the system property "glide.export.query.enforce_field_acl".
Can you please suggest some other way to achieve it, because as I am working in Custom application so I cannot make any changes to the OOB ACLs and System Property. I need some alternate way to get the users in the field.
Thanks in Advance!
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎09-28-2025 10:59 PM
seems that itil user is not getting satisfied some field level READ ACL on sys_user table.
Also issue could be due to query_range ACL
see this link
Reference variable not visible in Portal for non-admin user but visible in classic view
Did you try creating Table.None query_range ACL?
see this article
Ways to analyze and fix the query_range issue in portals using Access Analyzer
If my response helped please mark it correct and close the thread so that it benefits future readers.
Ankur
✨ Certified Technical Architect || ✨ 9x ServiceNow MVP || ✨ ServiceNow Community Leader
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎09-29-2025 09:20 PM
Hope you are doing good.
Did my reply answer your question?
If my response helped please mark it correct and close the thread so that it benefits future readers.
Ankur
✨ Certified Technical Architect || ✨ 9x ServiceNow MVP || ✨ ServiceNow Community Leader
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎09-29-2025 09:36 PM
Hi Ankur,
Thank you for the answer. I did go through the links provided by you.
But the issue is I am working on Custom Apps so I cant create/modify anything in Global Scope.
Like query range ACL Creation in sys_user table OR disabling the system property.
Is there any way which I can use instead of snrecordpicker which should not check for the access and get the user records.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎10-13-2025 01:40 AM
@Ankur Bawiskar
Can you please suggest something, in my problem scenario?
