SAP Knowledge Base Article - Public

2676936 - Permission error in the OData response when query entity getUsersPermissions

Symptom

You are observing the following error in your SuccessFactors OData API response:

  • [COE00020] User [XXX] attempted to access dynamic group module [PERMISSION] without proper access privilege.

"Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental."

Environment

SuccessFactors OData API.

Reproducing the Issue

  1. Create user on Success Factors (front-end);
  2. Grant basic permissions to query Odata API calls;
  3. Run the Query http://hostname/odata/v2/getUsersPermissions?locale=XXXX&userIds='user1, user 2'.getusersP.png

Cause

  •  The user that is trying to retrieve information from entity getUsersPermissions, must have access to the page Manage permission roles on the UI as well;
  •  A user that was not created on the provisioning is not able to see the page "Manage Role-Based Permissions" page.

Resolution

  1. A user must be created on the provisioning;
  2. The user created on the provisioning must have Odata basic permissions and manage permission roles enabled.

See Also

How to grant the manage Role-Based Permission page to a user that was created on the provisioning:

  • KBA: 2607738 - Manage Role-Based Permission Access Is Not Visible

How to grant basic Odata API query permissions to the user:

  • KBA: 2250344 - SuccessFactors: How to enable OData API

Keywords

getUsersPermissions, attempted to access dynamic group module, Permission error when query getUsersPermissions, query permission roles, query role-based permissions, query role based permissions, Odata, SuccessFactors API, [COE00020] User [XXX] attempted to access dynamic group module [PERMISSION] without proper access privilege , KBA , LOD-SF-INT-ODATA , OData API Framework , LOD-SF-INT , Integrations , How To

Product

SAP SuccessFactors HCM Core all versions