SAP Knowledge Base Article - Public

3650566 - User unable to execute task chain execution due to insufficient privileges after changes in the IDP

Symptom

After a change in the Identity Provider (IDP), for example switching from email-based login to UUID-based login, user is not able to schedule Task Chains anymore.
Error message: "The assigned user does not have the privileges necessary to execute this task."

A dummy user profile (e.g., Username_1) is automatically created during execution, but it has no roles or privileges assigned.

Environment

  • SAP Datasphere
  • Scheduling and Task Chains

Reproducing the Issue

  1. Login to SAP Datasphere using the affected user credentials.
  2. Navigate to the Task Chain that the user is authorized to execute.
  3. Trigger the Task Chain execution.
  4. Observe that a new user profile (e.g., Username_1) is automatically created during execution.
  5. Verify that this newly created user profile has no roles or privileges assigned.
  6. Confirm that the Task Chain fails with the error: "The assigned user does not have the privileges necessary to execute this task."

Cause

Corrupted consent settings due to changes in the Identity Provider (IDP).
The issue is also described in SAP Note 3089828.

Resolution

Revoke and reapply the consent for scheduling for the affected user.
See SAP Help: Changing SAP Datasphere Settings | SAP Help Portal

See Also

Keywords

task chain failure, insufficient privileges, dummy user creation, failed forbidden, SAP Datasphere, scheduling consent, UUID login, IDP change, dynamic user creation. , KBA , DS-DI-SCH , Scheduling and Task Chains , Problem

Product

SAP Datasphere all versions