SAP Direct integration with CUA

[Gianlu97 (Gianluca D'Andrea)]

Which IIQ version are you inquiring about?

Version 8.3

Please share any images or screenshots, if relevant.

Share all details related to your problem, including any error messages you may have received.

Hi,

I am developing an integration to SAP CUA, through the SAP Direct connector.
When I make a preview of users, it shows me the first 10.
The problem is in the preview of roles and profiles. I get the following errors:
[ InsufficientPermissionException ] [ Possible suggestions ] Required permission of table “USRSYSACT” is missing, ensure adding recommended permissions. [ Error details ] Caused by class com.sap.conn.jco.AbapException: (126) TABLE_ACCESS_NOT_ALLOWED: Message 000 of class null type : . SAP_QUERY_TABLE_NAME:USRSYSACT

[ InsufficientPermissionException ] [ Possible suggestions ] Required permission of table “USRSYSPRF” is missing, ensure adding recommended permissions. [ Error details ] Caused by class com.sap.conn.jco.AbapException: (126) COLUMN_ACCESS_NOT_ALLOWED: Message 000 of class null type : . SAP_QUERY_TABLE_NAME:USRSYSPRF

The issue is that the service account they gave us, we tested with the permissions required by the guide, and also with sap_all (Permissions for the whole system) and still getting the same error.

I leave attached a screen with the errors, and the permissions of the service account.

If you have any ideas, it would be of great help.

[vinnysail (vinod kumar maram)]

Hi @Gianlu97 ,
Is the SAP team able to access the tables directly at SAP end. As it’s saying permissions issue definitely there seems to be a problem.
A thick sap client should be there check if the permissions are working or not using the same service account.
Using iiq console you can perform test connection with more logging enabled you can get detailed error which can be shared to SAP team so they can help you in resolving the issue.

[Gianlu97 (Gianluca D'Andrea)]

Hi Vinod,

Sorry for the delay, the error continues. We made a call with the team and they showed me that for that service account they do a trace and they see that the service account has access to the tables, but in SailPoint there is this error. The service account has all the necessary permissions obtained from the guide, and in turn we tried to give it all the existing permissions in SAP.

I am looking forward to your comments, thank you!