SAP Knowledge Base Article - Public

3520518 - Error "Access denied for user, Expose the client in the your Cloud Connector RFC_COMMUNICATION_FAILURE" In S/4HANA On-Premise Connection - SAP Datasphere

Symptom

This KBA applies to SAP Datasphere connections to ABAP-based On-Premise systems (e.g., S/4HANA, ECC, or BW) via SAP Cloud Connector.

The following error occurs for feature data flow and replication flow when validating connection in SAP Datasphere.

Connection "<connection_name>" couldn’t be established.
- Data flows can’t be used because of errors in the connection.
- Replication flows can’t be used because of errors in the connection.

Data Flows: Cause: ABAP connector(Axino) ABAP connection check FAILED: request failed: rc=1, msg="Message: Partner signaled an error: Access denied for user XXX in client YYY on <Virtual host>:<Virtual port>. Expose the client in the your Cloud Connector in case it was a valid request.\nCode: RFC_COMMUNICATION_FAILURE"
Please refer to SAP Note 2849542 for more information.
 
Replication Flows: Cause: ABAP connector(Axino) ABAP connection check FAILED: request failed: rc=1, msg="Message: Partner signaled an error: Access denied for user XXX in client YYY on <Virtual host>:<Virtual port>. Expose the client in the your Cloud Connector in case it was a valid request.\nCode: RFC_COMMUNICATION_FAILURE"
Please refer to SAP Note 2849542 for more information.

Environment

  • SAP Datasphere
  • SAP Cloud Connector  

Reproducing the Issue

Validate the connection

Cause

The error occurs because the user and/or client attempting to use the RFC connection is either in SCC mapping:

  • Not included in the Authority Client Allowlist, or
  • Explicitly blocked in the Authority User Blocklist.

This prevents proper RFC authorization, resulting in communication failures for data and replication flows.

Resolution

In SAP Cloud Connector, "Cloud to On-Premises" mapping part, Actions column, click Maintain Authority Lists (only RFC). Clear the Authority Client Allowlist and Authority User Blocklist in Cloud Connector, then save and revalidate the connection. 

Refer point 16 in Configure Access Control (RFC) | SAP Help Portal.

See Also

Configure Access Control (RFC) | SAP Help Portal

Keywords

Datasphere, Cloud Connector, S/4HANA On-Premise Connection , KBA , DS-DI-CON , Connections , BC-MID-SCC , SAP Cloud Connector On-Demand/On-Premise Connectivity , Problem

Product

SAP Datasphere all versions