check_table_access
Diagnose the connected service account's effective access to one or more tables BEFORE attempting operations. Returns per-table readable/writable flags plus a status that distinguishes WHY access failed: "not_installed" (Invalid table —…
Instructions
Diagnose the connected service account's effective access to one or more tables BEFORE attempting operations. Returns per-table readable/writable flags plus a status that distinguishes WHY access failed: "not_installed" (Invalid table — the table does not exist, e.g. plugin/app not installed), "no_access" (403 — table exists but ACL denies this account), "empty" (readable but zero rows — truly empty or ACL row filtering), or "accessible". Also returns the account's current user and assigned roles. Read is probed with a sysparm_limit=1 GET; write is probed non-destructively with an empty PATCH to a reserved all-zero sys_id (404=writable, 403=denied) — no record is ever created or modified. Useful to check whether a plugin is installed and to avoid "User Not Authorized" retries.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| tables | Yes | Table names to check (max 20), e.g. ["incident", "sn_vul_vulnerable_item"] | |
| check_write | No | Also probe write access via a non-destructive empty PATCH (default: true) |