3468366 - Failed to fetch the data. Error in getDisConnectionChildren. Failed to get container children for /. Cause 1: Forbidden Code:99999;

• When creating Replication Flow or Data Flow in SAP Datasphere, while trying to select container in Microsoft Azure Data Lake Storage Gen2 connection below error message is raised:

HTTP Status: 500 error
Error Code: getChildrenFailed
Technical Message: Failed to fetch the data. Error in getDisConnectionChildren. Failed to get container children for /. Cause 1: Forbidden Code:99999; Cause 2: Could not browse resource hdlfs://storagegateway-agent:80/01-datasphere/ on HDFS connection. Code:80015;

• The Microsoft Azure Data Lake Storage Gen2 connection's validation might be failed with Forbidden error message.
  
  
• The listing of containers is not working in Data Builder - Forbidden error message.

SAP Datasphere

1. Navigate to Data Builder
2. Select space 
3. Create Replication Flow or Data Flow
4. Select Source connection > Sap Datasphere > Select repository object
5. Select Target Connection> Select Azure Data Lake(ADL)> Select container       

and/or

1. Try to create new Data Flow
2. Left Panel -> Sources -> Connections -> Try to open Azure connection folder

Wrong configuration

1. Check the firewall/security settings on MicroSoft Azure side.
   
   
2. Whitelist the Replication/Data Flow NAT IP (egress) on Microsoft Azure side.
   Follow SAP Help Portal Documentation: Finding SAP Datasphere IP addresses to get the outbound IP address of SAP Datasphere.
   
   
3. Make sure to follow SAP Help Portal Documentation's section Microsoft Azure Deployments Only: Virtual Network Subnet ID.
4. Double-check the Azure setup, especially the SAS token. If it has only "Read(r)" permission to the target container, the connection validation shows no error. However, listing the container in the Data Builder encounters the "Forbidden" error since the SAS Token is missing "List(l)" permission.

This request is not authorized to perform this operation, AuthorizationFailure, Azure data lake, firewall, IP address, DataFlowRequestError, adl_v2, "could not browse resource hdlfs", Forbidden Code  , KBA , DS-DI-RF , Replication Flows , CA-DI-CP-SGW , Storage Gateway , DS-DI-DF , Data Flows , Problem