SAP Knowledge Base Article - Public

3796199 - Live connection fails with oauth invalid_scope - SAP S/4HANA Cloud Public Edition 2608

Symptom

  • Users are unable to run SAP Analytics Cloud stories using a live connection to the SAP S/4HANA Public Cloud system.
  • Users are unable to create new Live Connections to the SAP S/4HANA Public Cloud system.
  • Error messages:
    • "We couldn't connect to your BW system. Please ask your system administrator to investigate."
    • "We couldn't connect to your S/4 HANA System."
    • "invalid_scope, The requested OAuth 2.0 scope cannot be granted because it is either not assigned to the current user or to the OAuth 2.0 client."

Environment

SAP S/4HANA Cloud Public Edition 2608

Reproducing the Issue

  1. Sign in to SAP Analytics Cloud.
  2. Open a story that uses a live data connection to S/4HANA Public Cloud.
  3. Observe the error "We couldn't connect to your BW system. Please ask your system administrator to investigate."

     

  1. Sign in to SAP Analytics Cloud.
  2. Try to create a new Live Connection.
  3. Observe the error "We couldn't connect to your S/4 HANA System."

Cause

OAuth 2.0 scopes required for the INA (BW) endpoints are not granted to the business user, resulting in an invalid_scope error.

Resolution

A fix is planned for delivery with

  • HFC04 (12-13.September) to the Test tenant (3SL).
  • HFC04+ (19-20. September) to the Production/development tenants (3SL) and Q-/P-system (2SL).

For more information please refer to:

SAP S/4HANA Cloud Public Edition, 2-System Landscape – Upgrade & Maintenance Schedule

SAP S/4HANA Cloud Public Edition, 3-System Landscape – Upgrade & Maintenance Schedule

The release date might be subject to change.

                       

Workaround

Please assign IAM App F9103_TRAN or F9104_TRAN (business catalog SAP_FIN_BC_SA_REP_BSC_PC) to the affected users. Note: Both applications are scope dependent: J55 - Margin Analysis

You can create a business role with business catalog SAP_FIN_BC_SA_REP_BSC_PC and deactivate all IAM Apps except F9103_TRAN or F9104_TRAN.

See Also

Live Data Connection to SAP S/4HANA Cloud Edition via OAuth | SAP Help Portal

Keywords

sac live connection, s/4hana cloud public edition, connection to bw system failed, invalid_scope, oauth 2.0, ina, bw ina, scope assignment, non-admin user, communication arrangement, sap_com_0065, oauth token 400, live data connection, authorization, valuehelp , KBA , CA-GTF-SB-S4H-SAC , SAP S4H embedded SAC UI integration , BC-SRV-APS-ANA-SSB , SAP Smart Business , BC-SRV-APS-ANA-SAC , ABAP Integration with SAP Analytics Cloud , CA-GTF-SB-S4H-RT , SAP Smart Business S4H - Run Time , Problem

Product

SAP S/4HANA Cloud Public Edition 2608