Symptom
When the user tries to run the Data Subject Information report they get the following error: Permission execmanager_read_events_sys_admin is required
Example of the error:
- Error fetching report list: {"requestUri":"/odata/v2/restricted/EMMonitoredProcess,Attachment,InformationDataSubjectRequest,InformationDataSubjectResult,InformationDataSubjectReport,InformationDataSubjectPurposeConfiguration,InformationDataSubjectConfigurationTemplate/EMMonitoredProcess?$filter=processType eq 'SCHEDULED_JOB' and processDefinitionId eq 'GdprDataSubjectInfoJob' and firstEventTime ge datetime'2019-04-12T11:34:01.045Z'","statusCode":403,"statusText":"Forbidden","headers":[],"body":"{\n\"error\" : {\n\"code\" : \"COE_GENERAL_FORBIDDEN\", \"message\" : {\n\"lang\" : \"en-US\", \"value\" : \"[COE0020]Permission execmanager_read_events_sys_admin is required\"\n}\n}\n}"}
Environment
SuccessFactors HCM suite - Data Subject Information report
Reproducing the Issue
- Step 1: Log in to the instance
- Step 2: Proxy to user affected user
- Step 3: In Search for Data Subject Information
- Step 4: Under Data Subject search tab click on Person Search
- Step 5: Enter employee id #00000
- Step 6: Click on Generate Report
- Step 7: Click on Report tab, then you can see error
Cause
The user does not have Read Execution Manager Event Payload Permissions
Resolution
Prerequisites / You have been assigned the general permissions to access and use the tool.
You find them in the Admin Center under Manage Permission Roles:
- Administrator Permissions > Admin Center Permissions > Read Execution Manager Events
- Administrator Permissions > Admin Center Permissions > Read Execution Manager Event Payload or Event Report
Please also check if these other ones are granted too:
- Administrator Permissions > Metadata Framework > Admin access to MDF OData API
- Administrator Permissions > Manage Integration Tools > OData API Attachment Import
- Administrator Permissions > Admin Center Permissions > Enable Information on Data Subject
- Administrator Permissions > Admin Center Permissions > Search Information on Data Subject
- Administrator Permissions > Admin Center Permissions > Print Information on Data subject
NOTE: Verify if in the group are some restriction in "target population of" that are excluding a group of user.
Keywords
Data Subject Information report, permissions, execmanager_read_events_sys_admin, COE_GENERAL_FORBIDDEN, [COE0020]Permission execmanager_read_events_sys_admin is required, statusCode":403 , statusText":"Forbidden" , KBA , LOD-SF-INT-ODATA , OData API Framework , LOD-SF-INT , Integrations , LOD-SF-PLT , Platform Foundational Capabilities , Problem