SAP Knowledge Base Article - Public

3662442 - OData consumption raises error 403 with technical user

Symptom

  • User is unable to consume OData with a technical user.
    • Error code: 403
    • Error message: "Asset doesn't exist, isn't exposed for consumption or contains properties that are not yet supported."
  • Other possible message:
    • "status": 403,
    •  "message": "Authenticated user is not permitted to perform the requested operation"}

Environment

  • SAP Datasphere

Reproducing the Issue

  1. Create an OAuth client with a technical user, assign a unique name, and copy the secret.
  2. Create a consumable view in the relevant space and enable ‘Expose For consumption’.
  3. Create a GET command in Postman to retrieve the token using the secret and client of the technical user.
  4. Create a GET command in Postman to read the view.
  5. Observe the 403 Forbidden error when attempting to read the data.

Cause

The roles assigned to the technical user do not allow access to the view being consumed.

Resolution

  1. Verify the scoped roles assigned to the technical user.
  2. Ensure that the roles provide access to the view being consumed.
  3. Assign roles that allow the technical user to see the view and perform the required operations.

See Also

SAP Knowledge Base Article 2891554 - How to create a Support User in SAP Datasphere.

Keywords

odata, technical user, consumption error, 403 forbidden, oauth, scoped roles, asset not exposed, postman, api, sap datasphere. , KBA , DS-BB-ODATA , To address issues related to Odata consumption API , Problem

Product

SAP Datasphere all versions