Symptom
- A meta task chain scheduled with a Technical User runs daily; most subchains succeed, but one subchain fails with an authorization/privilege error.
- Error message observed: "User does not have permission to run the task."
- Some failures may show status: "Failed (Forbidden)."
Environment
- SAP Datasphere
- Scheduling and Task Chains
Reproducing the Issue
- Open a meta task chain.
- Go to the Monitor tab and review the current schedule.
- Edit the existing schedule.
- In the scheduling screen, locate the User Type setting and select Use Technical User.
- Save the changes and reactivate the schedule if required.
- Let the schedule run and observe that a specific subchain fails with an authorization error while manual runs succeed.
Cause
A Technical User role lacked space assignment for the space of the failing subchain, so the required scheduling privilege did not apply to that space even though the Execute privilege (----E---) existed in the role.
Resolution
The Technical User cannot be found in Security -> Users, instead it should be found in System -> Administration -> App Integration -> OAuth 2.0 Client.
Choose the OAuth 2.0 Client and edit, you will see the Technical User and the assigned scope roles.
After that, go to Security -> Roles, open the Technical User’s scoped role that grants Data Warehouse Data Integration privileges.
Make sure:
1. the affected space is added to the scoped role
2. the role includes:
- Data Warehouse Data Integration (----E---) to schedule tasks.
- Data Warehouse Data Integration (--U-----) to run tasks manually (for validation)
See Also
Keywords
task chain, subchain, technical user, schedule, authorization error, permission denied, execute privilege, failed forbidden, role scope, space assignment, data integration, meta chain, scheduled run fails, privileges, scheduling error , KBA , DS-DI-SCH , Scheduling and Task Chains , How To
SAP Knowledge Base Article - Public