Grant InA role to create live connection to S/4HANA Cloud in SAP Analytics Cloud

[Former Member]

Dear all,

I am experiencing some issues in configuring a live data connection among SAC and S/4HANA Cloud. I followed the all procedures from SAP documentation https://help.sap.com/docs/SAP_ANALYTICS_CLOUD/00f68c2e08b941f081002fd3691d86a7/0485d540e0b340a0bc0da... , but at the end of the various steps, when I'm back to SAC connection to finalize it I got the following error message 'You are not authorized to query the remote system. Please ask your administrator to grant you the InA role.' . I do not understand how to proceed and how to fix this error even tho I followed the SAP Note 2805974. Can someone help with this issue and maybe explain what InA role is?

Thanks

Regards

Andrea

[aanchalchopra · Accepted solution]

Hi Andrea,

Please refer to the following note and see if this helps you:

https://userapps.support.sap.com/sap/support/knowledge/en/3050559

Resolution

• In the Communication System Configuration in SAP S/4HANA Cloud, please Change the User ID Mapping mode for OAuth 2.0 Identity Provider step from UUID to User Name
• Made sure the SAML User Mapping attribute used for the same user in SAP Analytics Cloud, matches the Business User's User Name under User Data.

For more information, please visit the Guide below;

Live Data Connection to SAP S/4HANA Cloud Edition via OAuth - https://help.sap.com/viewer/00f68c2e08b941f081002fd3691d86a7/release/en-US/0485d540e0b340a0bc0da86fe...

Best,

Aanchal

[Former Member · Accepted solution]

Hi Aanchal,

I've already followed the resolution notes and I am using a business user name in S/4 system that is the same as the SAML attribute used to authenticate users to SAC (see example below). Still I have the same issue.

Regards

Andrea

[Colorado]

I am having the exact same problem.

I am curious what you used for SSO/SAML Identity Provider. Was it a separate corporate one, or did you try and use the SAP IAS system, which is already connected to both systems?

[mfoeken]

Hi Andrea,

Did you setup SSO on the SAC tenant as well?

Kind regards,

Martijn van Foeken | Interdobs

[Former Member]

Hi Martijn,

yes I did setup SSO on the SAC tenant.

Regards,

Andrea

[former_member1724]

Hi Andrea,

Please provision SAP.bc.ina.service.v2.userole:INA_USER role to users in HANA DB and try once again.

Sukumar

[Former Member]

Hi Sukumarnaidu,

I think the role you mentioned has to be used in case of a live direct data connection to SAP HANA on premise system. I am working with S/4 HANA Cloud system.

Regards,

Andrea