SAP Knowledge Base Article - Public

2675922 - ODATA API: getDynamicGroupsByUser fails with permission error

Symptom

This document has been created to address the below error message that is returned when querying the Dynamic Group module of SuccessFactors:

  • [COE00020]User [username] attempted to access dynamic group module [permission] without proper access privilege.

Environment

  • SuccessFactors BizX
  • OData API

Reproducing the Issue

  1. You perform an ODATA API call similar to the following:
  2. https://apiX.successfactors.eu/odata/v2/getDynamicGroupsByUser?userId='username'&groupSubType='permission'
  3. You receive error: [COE00020]User [username] attempted to access dynamic group module [permission] without proper access privilege

Cause

The user performing the API call does not have the relevant have role-based permission access in 'Manage Role-Based Permission Access' section of SuccessFactors

Resolution

To resolve the [COE00020]User [username] attempted to access dynamic group module [permission] without proper access privilege error,

The below action needs to be performed for the user that is executing the API request:

  1. The user needs to be added to the 'Manage Role-Based Permission Access' section within SuccessFactors
  2. Tool Search > Manage Role-Based Permission Access > Add User
  3. Once the user is added here, and possesses the relevant OData API permissions, the above query should be successful

Note: You do not need to check 'Allow access to this page'.

See Also

API Error Codes: 2524436 - Q32017 (1708) Enhancement & Features for API-7426

Keywords

Dynamic Groups, Permission, getDynamicGroupByUser, groupSubType='permission', access dynamic group module, [COE00020] , KBA , LOD-SF-INT , Integrations , LOD-SF-INT-ODATA , OData API Framework , Problem

Product

SAP SuccessFactors HCM Core 1805