SAP Knowledge Base Article - Public

2676936 - Permission error in the OData response when query entity getUsersPermissions


You are observing the following error in your SuccessFactors OData API response:

  • [COE00020] User [XXX] attempted to access dynamic group module [PERMISSION] without proper access privilege.


SuccessFactors OData API.

Reproducing the Issue

  1. Create user on Success Factors (front-end);
  2. Grant basic permissions to query Odata API calls;
  3. Run the Query http://hostname/odata/v2/getUsersPermissions?locale=XXXX&userIds='user1, user 2'.getusersP.png


  •  The user that is trying to retrieve information from entity getUsersPermissions, must have access to the page Manage permission roles on the UI as well;
  •  A user that was not created on the provisioning is not able to see the page "Manage Role-Based Permissions" page.


  1. A user must be created on the provisioning;
  2. The user created on the provisioning must have Odata basic permissions and manage permission roles enabled.

See Also

How to grant the manage Role-Based Permission page to a user that was created on the provisioning:

  • KBA: 2607738 - Manage Role-Based Permission Access Is Not Visible

How to grant basic Odata API query permissions to the user:

  • KBA: 2250344 - SuccessFactors: How to enable OData API


getUsersPermissions, attempted to access dynamic group module, Permission error when query getUsersPermissions, query permission roles, query role-based permissions, query role based permissions, Odata, SuccessFactors API, [COE00020] User [XXX] attempted to access dynamic group module [PERMISSION] without proper access privilege , KBA , LOD-SF-INT-ODATA , OData API Framework , LOD-SF-INT , SF Integrations - EC Payroll, Boomi/ HCI, API , How To


SAP SuccessFactors HCM Core all versions