ACL Issue in Flow When the Flow is triggered by the System

[Rohit_Singh_19]

Hi All/ @Ankur Bawiskar 

I have a flow which is triggered at 4:00 AM GMT. Now in that flow I am using look-up record for the table X and then sending an email using Send Email Action. In Send E-mail body I am using Table X record attributes using data pili picker. When I am testing the Flow using Test UI Action in flow I am not facing any issue. My Flow Properties is set as Run As - User Who initiates the session.

However, when the flow is getting triggered by the system at 4:00 AM GMT. I am getting an error while sending email. 

I tried to change the Flow property to Run As - System User. Now when I am testing it manually through UI Action I am getting the same ACL error.

My understanding is when the flow is initiated by the system then the all the ACL's are evaluated to true. 

Error: Email validation failed: ACL restricts retrieval of the record: Table Name of X Sys_ID of the table record

Note: The Flow and Table X both are in same application. 

[Voona Rohila]

Hi @Rohit_Singh_19 

Did you check if there are read ACL's that has admin overrides false and is restricting the read access for admins.

Use Access Analyzer to debug if the admin role have access to that table or not.

[Tanushree Maiti]

Hi @Rohit_Singh_19 

Cause

The Run as property in the flow properties is set to System User. The system user lacks permission to read the table, which causes the failure.

Resolution

To resolve this issue:

1. Go to Flow Properties.
2. Set the Run as property to User who initiates session.
3. Run the flow with a user who has read access to the record.

Refer: https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB0852784

[Rohit_Singh_19]

Hi @Tanushree Maiti ,  I am still facing the issue when  Flow property is User who initiates session.

[Tanushree Maiti]

Share your READ ACL on that table screen shot with ACL role.. and share that Role user is having.