Join the #BuildWithBuildAgent Challenge! Get recognized, earn exclusive swag, and inspire the ServiceNow Community with what you can build using Build Agent.  Join the Challenge.

Flow Designer Look up Record in another scope

CCZMAX1
Mega Sage

Hi,

I’ve created a subflow in the Global scope and need to look up records from the following tables:

sys_user
sn_hr_core_job
sn_hr_core_position


I can successfully look up records in sys_user, but when attempting to access sn_hr_core_job, I receive the error: "Scope does not have read access to table sn_hr_core_job". I anticipate encountering the same issue with sn_hr_core_position, though the flow hasn’t reached that point yet.

 

The flow is running as 'System User', and I’ve tried adding a cross-scope privilege record, but it hasn’t resolved the issue. I’m unsure if I’ve set it up correctly.

 

Could anyone suggest how to resolve this?

Many thanks,
Max

1 ACCEPTED SOLUTION

Rajesh Chopade1
Mega Sage

Hi @CCZMAX1

 

Confirm following points once:

 

-Ensure you've added the correct cross-scope privilege record. selecting the appropriate scope, and allowing read access for those tables.

 

-Ensure that the System User or your subflow runner has the necessary roles (e.g., sn_hr_core.read) for those tables.

 

-If needed, adjust the ACLs to provide read access to the user or flow running in your global scope.

 

i hope my answer helps you to resolve your issue, if yes please mark my answer helpful and correct.

thank you

rajesh

View solution in original post

2 REPLIES 2

Rajesh Chopade1
Mega Sage

Hi @CCZMAX1

 

Confirm following points once:

 

-Ensure you've added the correct cross-scope privilege record. selecting the appropriate scope, and allowing read access for those tables.

 

-Ensure that the System User or your subflow runner has the necessary roles (e.g., sn_hr_core.read) for those tables.

 

-If needed, adjust the ACLs to provide read access to the user or flow running in your global scope.

 

i hope my answer helps you to resolve your issue, if yes please mark my answer helpful and correct.

thank you

rajesh

Thank you, this is now working. However, every time I make a change to my flow I have to update the records in the restricted caller access privilege table from state 'invalidated' to 'allowed'.