SAP Knowledge Base Article - Public

2160948 - SFAPI/Odata API returns "Insufficient Permissions!" error while inserting/Updating/upserting data for User Entity - SuccessFactors Integrations

Symptom

While trying to execute 'Insert/Update/Upsert' operations on the User entity, you receive below error messages:

  • SFAPI Domain Error!
  • Insufficient Permissions!
  • NO_PERMISSIONS_EXCEPTION

Sample API Response

Capture_KB.JPG

Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental.

Environment

  • SuccessFactors HXM Suite
    • Integrations
      • OData API
      • SFAPI 

Cause

This error message occurs due to Insufficient permission granted to the API user used for performing the operation (insert, update or upsert).

Resolution

To resolve this issue, you need to assign necessary permissions to the API user. Please follow below steps to assign the necessary permission:

   1. Login to the instance and find the role assigned to the API use by navigating to Admin Center-> View User Permission.

   2. And once you know the Role, navigate to Admin Center -> Manage Permission Roles -> Select the Role and grant the user the permission highlighted in below screenshot.

 Capture_364212.JPG

   3. Review if the SFAPI User Login is enabled under General User Permissions:

sfapi user login.png

4. Check for the Employee Export permission in Manage User

employee export.jpg

NOTE: In case the permission 'Import Employee Data' is not visible under Manager User, you need to ensure that the option 'Enable Control Employee Import Permission In RBP' is enabled in your Provisioning as that is required for this option to appear.

NOTE2: This solution is valid only for Employee Central customers. In case you do not have SF EC module, please do not follow these steps. This will impact in your "Employee Import" JOB (details in the KBA 2088785 - "Not Within your Administrative Target Populations" error - Employees Import (UDF) - Platform)

NOTE3: If you have added this permissions and still encounter the error on the Compound Employee query response, please review if the API has all the required permissions as per guide Employee Central Compound Employee API

Keywords

SFAPI/Odata API throwing error; Boomi iFlows failing with error message "Insufficient permissions!"; CPI error; SAP to SFSF Integration via PI is failing with permission error; NO_PERMISSIONS_EXCEPTION; SFAPI Domain Error! , KBA , LOD-SF-INT , Integrations , LOD-SF-INT-API , API & Adhoc API Framework , LOD-SF-INT-ODATA , OData API Framework , LOD-SF-INT-CE , Compound Employee API , Problem

Product

SAP SuccessFactors HXM Suite all versions