Symptom
"The time event can't be created as you may not have the required permissions. Please contact your system administrator." is returned while you are importing time events via our new Single Request REST API for Clock In Clock Out Time Events .
You may face similar return message for fetching or deleting a time event using this API too.
Environment
SAP SuccessFactors Time Tracking
Cause
Permission check was included in this new Single Request REST API for Clock In Clock Out Time Events , which is available since 1H 2026 release, while our old REST API for Sending Time Events from Terminal to Clock In Clock Out does not have permission check and it requires technical user TECHNICAL_USER_CICOTERMINAL_9D3F8AC1.
During the permission check, this message will be provided if the workAssignmentId is not part of the target population or if the workAssignmentId does not exist at all.
To add an additional call to a method to validate the workassignmentID in the system and return a different message will impact performance, so there currently is no plan to add an additional call to such a method in the Single Request REST API.
Resolution
Please make sure the workAssignmentId is a valid existing one, and the user calling the Single Request REST API for Clock In Clock Out Time Events has permission to create, view or delete the time events for the employee with this assignment ID.
Keywords
workAssignmentId, rest, api, cico, time, event, single, request, terminal, return, message, code, 403, forbidden, assignment, ID, assignmentID , KBA , LOD-SF-TTR-CIO , Clock In/ Clock Out , Problem
SAP Knowledge Base Article - Public