SAP Knowledge Base Article - Preview

3771290 - 403 Forbidden When Calling Master Data APIs Due to JWT Containing Only "uaa.resource" Scope - SAP Complaint Handling

Symptom

  • Calling any Master Data API (for example, GET Plant) returns HTTP 403 Forbidden.
  • The decoded JWT access token contains only the scope "uaa.resource".
  • The token payload confirms the absence of required CMH-specific API scopes/authorities.


Read more...

Environment

SAP Complaint Handling

Product

SAP Complaint Handling all versions

Keywords

403 forbidden, uaa.resource, jwt scope missing, xsuaa, client_credentials, cmh api, master data api, api-access plan, service instance, service key, oauth token, authorization, scopes, privileges, onboarding , KBA , LOD-DMO-CMH , SAP Complaint Handling , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.