field ACL failing due to the record write * ACL

[User163016]

I'm trying to give our Service Desk Analysts write privileges to a few fields on the sys_user table to help troubleshoot orchestration and login issues.   I have a role called sd_analyst and I created a field level ACL to give that role write access.   Unfortunately it's not working and in my debugging efforts found that it's failing because the record write * AC.   This AC's description is:

To write to records on any table the following must apply:

user has the admin role

OR

glide.sm.default_mode = allow which allows access to all tables in the absence of any other security rules (ACLs)

Any suggestions are appreciated

Thanks

[User163016]

I had incorrectly created the table level ACL.   I had created: record/sys_user.*/write.   I found out this is still considered Field level, using "*".   I created ACL: record/sys_user/write and it worked.   Thanks