2160948 - SFAPI/Odata API returns "Insufficient Permissions!" error while inserting/Updating/upserting data for User Entity - SuccessFactors Integrations

While trying to execute 'Insert/Update/Upsert' operations on the User entity, you receive below error messages:

• SFAPI Domain Error!
• Insufficient Permissions!
• NO_PERMISSIONS_EXCEPTION

Sample API Response

Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental.

• SuccessFactors HXM Suite
• Integrations
• OData API
• SFAPI 

This error message occurs due to Insufficient permission granted to the API user used for performing the operation (insert, update or upsert).

To resolve this issue, you need to assign necessary permissions to the API user. Please follow below steps to assign the necessary permission:

   1. Login to the instance and find the role assigned to the API use by navigating to Admin Center-> View User Permission.

   2. And once you know the Role, navigate to Admin Center -> Manage Permission Roles -> Select the Role and grant the user the permission highlighted in below screenshot.

   3. Review if the SFAPI User Login is enabled under General User Permissions:

4. Check for the Employee Export permission in Manage User

NOTE: In case the permission 'Import Employee Data' is not visible under Manager User, you need to ensure that the option 'Enable Control Employee Import Permission In RBP' is enabled in your Provisioning as that is required for this option to appear.

NOTE2: This solution is valid only for Employee Central customers. In case you do not have SF EC module, please do not follow these steps. This will impact in your "Employee Import" JOB (details in the KBA 2088785 - "Not Within your Administrative Target Populations" error - Employees Import (UDF) - Platform)

NOTE3: If you have added this permissions and still encounter the error on the Compound Employee query response, please review if the API has all the required permissions as per guide Employee Central Compound Employee API

SFAPI/Odata API throwing error; Boomi iFlows failing with error message "Insufficient permissions!"; CPI error; SAP to SFSF Integration via PI is failing with permission error; NO_PERMISSIONS_EXCEPTION; SFAPI Domain Error! , KBA , LOD-SF-INT , Integrations , LOD-SF-INT-ODATA , OData API Framework , LOD-SF-INT-API , API & Adhoc API Framework , LOD-SF-INT-CE , Compound Employee API , Problem