Cannot create user groups from scoped application

[Maik Skoddow]

At my scoped application I want to create user groups via a business rule. 

I checked  "create" and "update" at Table "sys_user_group":

And I added cross scope priviledges:

But it's still not possible to create user groups:

Does anyone have any idea what I might have forgotten?

[Sagar Pagar]

Hello Maik,

You need to set the "Allow configuration" check box to true it will work fine. "Allow configuration" restricts whether out-of-scope applications can create application files like Business rules, New fields, Client script and UI actions.

Refer this blog for information about A securing an application cross scope application.

Securing an application using Cross Scope Access, Application Access Settings & Restrict Table Choic...

You may also help this thread cross scope privileges denied by table cross scope.

Regards,

Sagar Pagar

[Maik Skoddow]

I'm afraid, that was not the right solution. I checked "Allow configuration", but I still cannot create user groups at my scoped application.

It's really frustrating!

[Sukraj Raikhraj]

Hey Maik, I have seen similar issue in the past. The article that Sagar posted is helpful in resolving the issue:

Example of creating a Record in a Group Table:

Application access settings are different on each OOTB tables. For example, the default Group table allows another application scope Web Service access and Read access. However, other permissions are restricted. If a script attempts to perform an operation that is not allowed, admin users see a message:

Execute operation on API 'GlideRecord.insert' from scope 'CSA' was denied. The application 'CSA' must declare a cross scope access privilege. Please contact the application author to update their privilege requests.

Evaluator: com.glide.script.fencing.CrossScopeAccessNotAllowedException: Access to GlideRecord.insert from scope x_13241_csa not allowed

In the above case, "Can Create" checkbox has to be set to true to be able to create the records in Group table.

[Maik Skoddow]

Hi Sukraj,

as you can see in the above screenshot, I have checked "Can Create" at sys_user_group, but it's still not working.