Kenneth, Yup that helps. That confirm my intuition that giving SeeCustomField rights on the queue level should be enough for my usecase. As kevin said, that looks like a bug in 3.8.7, I'll try to migrate to RT4 and file a bug if the issue is still there. Thanks, -- daniel