https://docs.servicenow.com/bundle/rome-applicationdevelopment/page/build/applications/concept/c_DefaultDesignAccessPermissions.html
The baseline behavior of a table in a privately-scoped application is that all application scopes can
read from the table. A privately-scoped application is an application that restricts write access to its
tables and resources to scripts within the same scope. However, read access is allowed by default for
all scopes, unless the administrator explicitly denies it using an Access Control rule. This allows for
data sharing between different applications while maintaining data integrity and security. Reference:
[Product Documentation | ServiceNow], [Advantages of Scoped Applications in ServiceNow]
