---
sourceDocument: Yokohama Build or modify applications
sourceDocumentLink: https://www.servicenow.com/docs/r/yokohama/application-development

 Release :

    - yokohama

ft:locale :

    - en-US

ft:publication_title :

    - Yokohama Build or modify applications

ft:clusterId :

    - cadev

bundleId :

    - cadev

workflow :

    - Development, Data, and Analytics


---

# Cross-Scope Privilege API

# Cross-Scope Privilege API - ServiceNow Fluent {#ariaid-title1}

* Release version: Yokohama
* 
* Updated March 12, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

The Cross-Scope Privilege API defines cross-scope privileges \[sys_scope_privilege\] for runtime access tracking.
Note:  
For the latest ServiceNow Fluent API documentation and examples, see the [ServiceNow Fluent API reference](https://servicenow.github.io/sdk/) and [ServiceNow SDK examples repository](https://github.com/ServiceNow/sdk-examples) on GitHub.

Runtime access tracking allows administrators to manage script access to application resources by creating a list of script operations and targets that the system authorizes to run. For general information about cross-scope
privileges, see [Cross-scope privilege record](https://www.servicenow.com/docs/8piwssnx7nYgXqlNizilzg "Runtime access tracking uses cross-scope privilege records to determine which script operations and targets the system allows to run.").
**Related concepts**   

* [ServiceNow Fluent](https://www.servicenow.com/docs/~uRaWXiuRJuyUsvJypBknQ "Define application metadata in source code using the ServiceNow Fluent domain-specific programming language.")

## CrossScopePrivilege object {#ariaid-title2}

Configure cross-scope privileges \[sys_scope_privilege\] that determine which script operations and targets the system allows to run in the application.
{#cs-privileges-object-now-ts__table_vy2_525_jq__entry__3}{#cs-privileges-object-now-ts__now-id-desc2}

| Name | Type | Description |
|-|-|-|
| $id | String or Number | Required. A unique ID for the metadata object. When you build the application, this ID is hashed into a unique sys_id. For more information, see [ServiceNow Fluent language constructs](https://www.servicenow.com/docs/3RTnzOESnTILKQIIO7V1sg "ServiceNow Fluent language constructs provide additional functionality for development in source code with ServiceNow Fluent APIs."). Format: `Now.ID['String' or Number]` |
| status | String | Required. The authorization for this record. Valid values: * requested * allowed * denied {#cs-privileges-object-now-ts__ul_fmp_tkx_q2c} |
| operation | String | Required. The operation that the script performs on the target. The target type determines the available operations. Tables \[sys_db_object\] support the read, write, create, and delete operations. Script includes \[sys_script_include\] and script objects \[sys_db_object\] only support the execute operation. Valid values: * create * delete * read * write * execute {#cs-privileges-object-now-ts__ul_lcv_vkx_q2c} |
| targetName | String | Required. The name of the table, script include, or script object being requested. |
| targetScope | String | Required. The application scope from which resources are requested. |
| targetType | String | Required. The type of request: script include, script object, or table. Valid values: * sys_script_include * scriptable * sys_db_object {#cs-privileges-object-now-ts__ul_qbn_zkx_q2c} |
| $meta | Object | Metadata for the application metadata. With the installMethod property, you can map the application metadata to an output directory that loads only in specific circumstances. $meta: { installMethod: 'String' } Valid values for installMethod: * demo: Outputs the application metadata to the metadata/unload.demo directory to be installed with the application when the Load demo data option is selected. * first install: Outputs the application metadata to the metadata/unload directory to be installed only the first time an application is installed on an instance. {#cs-privileges-object-now-ts__ul_n3q_y3s_42c} |
[Table 1. Properties]

{#cs-privileges-object-now-ts__table_vy2_525_jq}  

    import { CrossScopePrivilege } from '@servicenow/sdk/core'

    CrossScopePrivilege({
       $id: Now.ID['cross_1'],
       status: 'allowed',
       operation: 'execute',
       targetName: 'Script type',
       targetScope: 'x_snc_example',
       targetType: 'scriptable',
    })