Read operation on table 'sn_hr_core_profile' from scope 'Global'

[manasamaniac]

Hi Team ,

Issue : Below error is being displayed when reading records from HR profile table even though cross priviledges is present and acl is present . How can i resolve this issue. Coss Scope priviledge with Global as scource scope is not allowed .

ERROR :Source descriptor is empty while recording access for table sn_hr_core_profile: no thrown error
Security restricted: Read operation on table 'sn_hr_core_profile' from scope 'Global' was denied because the source could not be found. Please contact the application admin.
Security restricted: Read operation on table 'sn_hr_core_profile' from scope 'Global' was denied. The application 'Global' must declare a cross scope access privilege. Please contact the application admin to update their access requests.

[michaelj_sherid · Accepted solution]

This is the error you will receive when the Application Restricted CallerAccess record is not "Allowed".

You can go to the Restricted Caller Access form and look for records that do not have the status of "Allowed". It is my theory that tthe operation is making a call into the HR:Core scope that you have not allowed.

This Restricted Caller Access is a new feature in Kingston. This is how we have enhanced the HRSD application to give the HR Administrator more visibility into the operations made against the HR:Core scope.

There is a Community webcast on this new functionality that would give detailed information on this new feature. You can find it here: 

https://community.servicenow.com/community?id=community_question&sys_id=cbd8b9badbb9570058dcf4621f961982

Keep us posted and thanks for being part of the Community.

Regards,

Mike

[manasamaniac]

@michaelj.sheridan  : Thank you for the help .Will check this out and post it if it worked .

[sachinbhasin11]

Just to add on Michael's comment for this feature in Kingston 'Read' access is granted Out of the Box to the HR Profile table if the call is made from the below script includes

1. LinkGenerator

2. Conditions QueryAjax

You would be required to create a new record in this table (sys_restricted_caller_access] and give specified input about the source scope/ table object from where you are trying to access the target record (HR Profile)

[adrian08]

I have a requirement here to make HR cases from workflow activity in Global scope. I noticed that every now and then, a new entry in the RCA Priveleges are created here with Requested status, thus breaking that workflow. How do I permanently say that we auto-Allow all operations from a certain workflow activity to the target HR case table?