---
sourceDocument: Brazil Telecommunications Network Inventory
sourceDocumentLink: https://www.servicenow.com/docs/r/telecom-network-inventory

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Telecommunications Network Inventory

ft:clusterId :

    - telninv

bundleId :

    - telninv

workflow :

    - Customer and Industry


---

# Query range access for TNI tables

# Query range access for TNI tables {#ariaid-title1}

Release version: Brazil  
Updated October 8, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
TNI tables use query range access control lists (ACLs) to enforce field-level read access for authenticated users who already have read permission on the table.

When a user has read access to a TNI table, query range ACLs automatically grant them access to the associated query range fields. No additional roles are required.

## Query range ACL pattern {#query-range-access-for-tni-tables__section_acl_pattern}

TNI uses a two-part ACL pattern to control query range access. A Deny Unless ACL blocks unauthenticated requests, and an Allow If ACL grants access to any authenticated user who already has read permission on the table. This pattern is applied at both the table level and the record level for each TNI table.
{#query-range-access-for-tni-tables__section_acl_pattern__entry__3}

| ACL type | Security attribute | Effect |
|-|-|-|
| Deny Unless | UserIsAuthenticated | Blocks unauthenticated users from using query range fields. |
| Allow If | UserIsAuthenticatedAndHasRightsToRead | Grants query range access to any authenticated user who already has read access to the table. |
[Table 1. Query range ACL records per TNI table]

## Roles that receive query range access {#query-range-access-for-tni-tables__section_roles}

Query range access is derived from existing read roles. No new roles are required.

* Users with the `sn_ni_core.inventory_agent`, `sn_ni_core.inventory_integrator`, or `sn_ni_core.inventory_template_manager` role automatically receive query range access to TNI tables.
* For Number Management tables, users with the `sn_inv_num_mgmt.inventory_number_manager` role receive the same access.