The primary purpose of Restricted Caller Access (RCA) is to provide a robust security layer that defines and tracks cross-scope access to scoped applications like HRSD. In a multi-scope environment, scripts or processes from one scope (such as Global) may need to access tables or APIs in another (such as HR Core). RCA ensures these interactions are intentional and authorized. It can operate in 'Tracking' mode, where it logs interactions for administrator review, or 'Enforced' mode, where it blocks any call that does not have an explicit 'Allowed' record. This prevents unauthorized data leaks and ensures that sensitive HR information is protected from unintentional access by other applications on the ServiceNow platform, maintaining a strict 'need-to-know' boundary at the technical level.

================