RCA errors on Employee center / Pro (ESC) portalDescriptionAfter activating the plugins/apps without changing anything security access restriction errors are shown as below.Seen in Rome Patch 0 / Employee Center Pro 21.0.2As well as Rome Patch 1 / Employee Center Pro 22.0.7Errors:-----ErrorRead operation on table 'sn_ja_task' from scope 'Employee Center' was denied. The application 'Employee Center' must declare a cross scope access privilege. Please contact the application admin to update their access requests.Errorcom.glide.script.fencing.access.ScopeAccessNotGrantedException: read access to sn_ja_task not grantedErrorScript source code logged to consoleErrorFailing widget: 'Employee Center Header' (d0009941eb103010ed7966d6475228c1)ErrorRead operation on table 'sn_hr_core_case' from scope 'Employee Center' was denied. The application 'Employee Center' must declare a cross scope access privilege. Please contact the application admin to update their access requests.ErrorRead operation on table 'sn_ja_task' from scope 'Employee Center Pro' was denied. The application 'Employee Center Pro' must declare a cross scope access privilege. Please contact the application admin to update their access requests.-----ErrorRead operation on table 'sn_doc_task' from scope 'Employee Center' was denied. The application 'Employee Center' must declare a cross scope access privilege. Please contact the application admin to update their access requests.Errorcom.glide.script.fencing.access.ScopeAccessNotGrantedException: read access to sn_doc_task not grantedErrorScript source code logged to consoleErrorFailing widget: 'Employee Center Header' (d0009941eb103010ed7966d6475228c1)ErrorRead operation on table 'sn_hr_core_case' from scope 'Employee Center' was denied. The application 'Employee Center' must declare a cross scope access privilege. Please contact the application admin to update their access requests.ErrorRead operation on table 'sn_doc_task' from scope 'Employee Center Pro' was denied. The application 'Employee Center Pro' must declare a cross scope access privilege. Please contact the application admin to update their access requests.----Steps to Reproduce After installing the updated Employee Center plugin and the Pro plugin, these errors are displayed until the customer admin grants access to get rid of these errors. 1. Log in to an affected instance2. Navigate to the new portal:/esc---> Errors displayed"Read operation on a particular resource has been denied. The application must declare a cross scope access privilege."WorkaroundWhenever there is an error that matches the format, "Read operation on a particular resource has been denied. The application must declare a cross scope access privilege."This is because of an RCA that is in requested/invalidated state and needs to be accepted. Search for "Restricted Caller Access" (RCA in short) in navigation menu and look for RCAs in requested state.We use a requested RCA to grant store apps access to protected resources in the Now Platform without the need to wait for the next family release.If you have the system admin or application admin role, you can review requested RCAs and approve and deny them. RCAs are classified into three categories: Real RCA: System generated RCA during functional flow to access cross scope resourcesRequested RCA: RCA shipped by store app in source scope are called requested RCAsGenerated RCA: During run time for app installation system generates RCAs in target application scope for all the Requested RCAs in requested state. These are called generated RCAsRelated Problem: PRB1526318