SAP Knowledge Base Article - Public

3763130 - Odata API returns empty list or error for EmbeddedImages in administrative area context

Symptom

Access to specific attribute via the API within an administrative area is not possible or returns an empty list - Error when addressing an embedded image directly: "Attempted to retrieve a resource of Entity Type: 'EmbeddedImage' that is not accessible in the administrative area."

Affected attribute and endpoint: EmbeddedImages: /EmbeddedImages('IMAGE_ID') and /Groups('WORKSPACE_ID')/Articles('ARTICLE_ID')?$expand=EmbeddedImages

The issue occurs exclusively when using the OData API. Access via the frontend using the same user/token succeeds.

Environment

SAP SuccessFactors Work Zone

Reproducing the Issue

  1. Use an alias user scoped to an administrative area.
  2. Ensure multiple integrated workspaces exist within that administrative area.
  3. Retrieve articles via the odata api from a workspace in the administrative area.
  4. Call /Groups('WORKSPACE_ID')/Articles('ARTICLE_ID')?$expand=EmbeddedImages.
  5. Observe that EmbeddedImages is returned as an empty list, while Source contains references and ids of embedded images.
  6. Attempt to access an embedded image directly via /EmbeddedImages('IMAGE_ID') or /EmbeddedImages('IMAGE_ID').
  7. Observe that the direct EmbeddedImages request fails with "not accessible in the administrative area" or similar 403-style denial.

Cause

When a Knowledge Base article is mirrored across workspaces, EmbeddedImage records are created only for the primary ArticleVersion and not for the ArticleVersionMirror. With an admin-area–scoped OAuth token, the access check for EmbeddedImage delegates to its embeddable (the master ArticleVersion), whose workspace does not belong to the admin area — causing the request to be rejected with "not accessible in the administrative area" error, or returning an empty list for $expand=EmbeddedImages.

Resolution

This is a known product defect. The fix is planned for Jul 9, 2026.

See Also

KBA 2980868 - Useful resource on SAP Jam & Work Zone APIs and Support scope

Keywords

odata, api, administrative area, embeddedimages, empty list, 403, access denied, groups articles expand, article mirror, articleversionmirror, alias user, workspaces, work zone, frontend vs api, not accessible in the administrative area,  INC26683590 , KBA , LOD-SF-SWZ-DEV , Custom Development and API concerns , Known Error

Product

SAP SuccessFactors Work Zone all versions