How must Application Access be configured to prevent all other private application scopes from creating configuration records on an application's data tables?
https://www.servicenow.com/docs/bundle/xanadu-application-development/page/build/applications/concept/c_ExampleDenyingAllRuntimeAccess.html