Symptom
Customer using OData API call for entity "EmpPayCompRecurring "
But getting below error:
<message lang="en-US">[COE0020]User SFADMIN doesn't have the 'Employee Central Foundation API' access permission for FOPayComponent</message>
Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental.
Environment
- SAP SuccessFactors HXM Suite
- Integrations
- OData API
- Integrations
Reproducing the Issue
1. Customer trying to fetch data for user, using OData request for entity EmpPayCompRecurring:
https://apisalesdemo4.successfactors.com/odata/v2/EmpPayCompRecurring(payComponent='1000',seqNumber=1L,startDate=datetime'2022-06-01T00:00:00',userId='XXXXXX')/payComponentNav
2. They get below response for request:
<error xmlns="http://schemas.microsoft.com/ado/2007/08/dataservices/metadata">
<code>COE_GENERAL_FORBIDDEN</code>
<message lang="en-US">[COE0020]User SFADMIN doesn't have the 'Employee Central Foundation API' access permission for FOPayComponent</message>
</error>
Cause
OData API is by default enabled but some of the permissions are missing, however you need to provide the user with correct RBP permission for accessing any Employee Central API.
As customer want to fetch foundation object in the query for that they need to provide "Employee Central Foundation OData API" Permission.
Resolution
Provide below permission to API user.
- Go to Admin Center > Manage Security > Manage Permission Roles
- Click Group to add the following permissions:
- Navigate to Administrator Permissions
- Search for Employee Central API
- Add below permission "Employee Central Foundation OData API"
See Also
Note These permissions give the user only access to use the API and do not grant any user interface logon.
https://userapps.support.sap.com/sap/support/knowledge/en/2250344
Keywords
Odata API Enable Odata Odata Permission , KBA , LOD-SF-INT-ODATA , OData API Framework , LOD-SF-INT , Integrations , How To, Employee Central Foundation OData API, User SFADMIN doesn't have the 'Employee Central Foundation API' access permission , KBA , LOD-SF-INT-ODATA-OAU , ODATA OAUTH Authentication , Problem
Product
Attachments
Pasted image.png |