Not able to add users to a group, which contains scoped application roles.Description<!-- div.margin{ padding: 10px 40px 40px 30px; } table.tocTable{ border: 1px solid; border-color:#E0E0E0; background-color: rgb(245, 245, 245); padding-top: .6em; padding-bottom: .6em; padding-left: .9em; padding-right: .6em; } table.noteTable{ border:1px solid; border-color:#E0E0E0; background-color: rgb(245, 245, 245); width: 100%; border-spacing:2; } table.internaltable { white-space:nowrap; text-align:left; border-width: 1px; border-collapse: collapse; font-size:14px; width: 85%; } table.internaltable th { border-width: 1px; padding: 5px; border-style: solid; border-color: rgb(245, 245, 245); background-color: rgb(245, 245, 245); } table.internaltable td { border-width: 1px; padding: 5px; border-style: solid; border-color: #E0E0E0; color: #000000; } .title { color: #D1232B; font-weight:normal; font-size:28px; } h1{ color: #D1232B; font-weight:normal; font-size:21px; margin-bottom:-5px } h2{ color: #646464; font-weight:bold; font-size:18px; } h3{ color: #000000; font-weight:BOLD; font-size:16px; text-decoration:underline; } h4{ color: #646464; font-weight:BOLD; font-size:15px; text-decoration:; } h5{ color: #000000; font-weight:BOLD; font-size:13px; text-decoration:; } h6{ color: #000000; font-weight:BOLD; font-size:14px; text-decoration:; } ul{ list-style: disc outside none; margin-left: 0; } li { padding-left: 1em; } --> Example: Group : Customer Support Roles assigned to this group : sn_hr_core.basic [ assignable by : sn_hr_core.admin ] 1) Impersonate a non-admin user in affected instance. [ Based on ACL, this user is allowed to add members in group 'Customer Support']2) Navigate to sys_user_group.LIST, and open this group : 'Customer Support'3) Click the ‘Edit’ UI action to add the respective 'New User' to the group 'Customer Support'.4) Click on ‘Save’. Expected Result: 'New User' will be added to 'Customer Support' group. Actual Result : 'New User' will NOT BE added to 'Customer Support' group. Release or EnvironmentAll supportedCauseThis is due to group : 'Customer Support' have scoped application roles which can only be assigned by a person who has a particular role. In all scoped application roles there is a field called as 'assignable by'. The user who is trying to add this user in the group should have the role present in the assignable by field. ResolutionAdd 'role' to the user which is present in the assignable by field of the scoped application role. Additional InformationThis issue was not debugged even when ACL debugger was on, and lead to iAccessHandler iAccessHandler: An internal system check using hidden source code on the platform. This is a system security check that you cannot modify. IAccessHandler can grant or deny access to a resource without evaluating ACLs. If IAccessHandler is ignored, then the ACLs are evaluated. You cannot modify the IAccessHandler checks in any way. For example, an IAccessHandler implementation is used for access checks on application resources and this cannot be changed.