Cross-scope access errors from the Employee Service Portal pluginIssue When navigating to the Employee Service Portal, multiple cross-scope error messages and failing widgets appear. The application requires cross-scope access records to exist and be set to the correct status before it can read the relevant tables. The following error messages are examples of what may appear: - `com.glide.script.fencing.access.ScopeAccessNotGrantedException: read access to sn_hr_sp_todos_config not granted`- `Read operation on table 'sn_hr_sp_todos_config' from scope 'ServiceNow for Microsoft Teams' was denied. The application 'ServiceNow for Microsoft Teams' must declare a cross scope access privilege. Please contact the application admin to update their access requests.`- Failing widget: Welcome greeting (EESP) (caf0d0e45baf101022527d6f7281c71c)- Failing widget: Tasks (EESP) (ccbb831d53231010fa75ddeeff7b126d) Release<!-- /*NS Branding Styles*/ --> .ns-kb-css-body-editor-container { p { font-size: 12pt; font-family: Lato; color: var(--now-color--text-primary, #000000); } span { font-size: 12pt; font-family: Lato; color: var(--now-color--text-primary, #000000); } h2 { font-size: 24pt; font-family: Lato; color: var(--now-color--text-primary, black); } h3 { font-size: 18pt; font-family: Lato; color: var(--now-color--text-primary, black); } h4 { font-size: 14pt; font-family: Lato; color: var(--now-color--text-primary, black); } a { font-size: 12pt; font-family: Lato; color: var(--now-color--link-primary, #00718F); } a:hover { font-size: 12pt; color: var(--now-color--link-primary, #024F69); } a:target { font-size: 12pt; color: var(--now-color--link-primary, #032D42); } a:visited { font-size: 12pt; color: var(--now-color--link-primary, #00718f); } ul { font-size: 12pt; font-family: Lato; } li { font-size: 12pt; font-family: Lato; } img { display: ; max-width: ; width: ; height: ; } } All ReleasesCause The application requires cross-scope access records to be created and set to the correct status before it can read the relevant tables. Resolution To resolve cross-scope access errors from the Employee Service Portal, create the required cross-scope access records and set each to the correct status. 1. Navigate to the cross-scope access module. If records already exist in Requested or Invalidated status, filter for those records and change the Status field to Allowed rather than creating new records. If no record exists, create one manually by specifying the source scope, source type (for example, Service Portal Widget), and the target resource identified in the error message. 2. Create a cross-scope access record for table `sn_hr_sp_todos_config` in the global scope. 3. Create a cross-scope access record for table `sn_hr_sp_todos_config` in the scope of the application. 4. Create a cross-scope access record for the script include `ca_CampaignContent`. 5. For each record created, set the Status field to Allowed, not Requested. After creating and activating the cross-scope access records, the portal no longer generates error messages. Related Links - [Define cross-scope access to an application resource](https://docs.servicenow.com/csh?topicname=set-RCA-level.html&version=latest)- [Read operation on table was denied for lifecycle event cases while completing activities](https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB0960942) KB0960942- [Service Portal throws cross-scope warning messages — Support and Troubleshooting](https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB0994819) KB0994819- [How to grant cross-scope access to an application or module — Support and Troubleshooting](https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB0690133) KB0690133