Hi, unfortunately without clear details of your configuration or payloads from both scenarios there is little to evaluate.
Is your API using a single integration account for authentication? or are you authenticating with details from individual users? If using 1 auth account have you confirmed that the individual users have access to the underpinning data\records and that the payload they generate is complete and aligned with a payload generated by an admin user?

Hi Tony, Yes my API is a single integration account with Auth 2.0 authentication type.

Our User has all the rights to access the data of incident table.

Hi,

This is the payload that we have been sending over.

Hi,

Could you please share few details like what kind of ACL should be created and I guess we need to create ACL on the instance from which we are trying to send the data ?