How To Fix SOAUTH2042 - Keine Berechtigung für einige OAuth-2.0-Token (mit ST01 analysieren).

SAP Error Message - Details

• Message type: E = Error

• Message class: SOAUTH2 - OAuth2 Messages

• Message number: 042

• Message text: Keine Berechtigung für einige OAuth-2.0-Token (mit ST01 analysieren).

Was verursacht dieses Problem?

The system performs authorization checks when starting the token
revocation and before display and deletion of OAuth 2.0 Token Contexts.
When starting the token revocation in administrator mode (transaction:
SOAUTH2_REVOKE_ADM) the system checks if the user has the authorization
S_OA2_OBJ with the object <ZH>REVOCATION</>. (If the user does not have
this authorization, the system will change to the standard behaviour of
transaction SOAUTH2_REVOCATION. I.e. the user will only see their own
tokens.)
Before <ZH>display </>of a token context, the system checks if the
logged on user has the authorization to <ZH>display </>the user class
and the OAuth 2.0 client assigned to this token context. In detail the
following authorization objects will be checked:
S_USR_GRP (with the class of the assigned user and activity <ZH>03</>)
for the user group
S_OA2_CL (with the assigned OAuth 2.0 client and activity <ZH>03</>) for
the OAuth client

Das System gibt eine Fehlermeldung aus und erlaubt Ihnen nicht, mit dieser Transaktion fortzufahren, bis der Fehler behoben ist.

Before <ZH>deletion </>of a token context, the system will check if the
logged on user has the authorizations <ZH>change </>for the OAuth 2.0
client and <ZH>unassign </>for the user class assigned to this token
context . In detail the following authorization objects will be checked:
S_USR_GRP (with the class of the assigned user and activity <ZH>22</>)
for the user group
S_OA2_CL (with the assigned OAuth 2.0 client and activity <ZH>02</>) for
the OAuth client

Systemantwort

If the authorization check for at least one token context failed the
system will raise this message.
If the authorization check for either client or user group display
failed, the particular token context won't be displayed.
If the authorization check for either client or user group change
failed, the particular token context won't be revoked.

Wie behebe ich diesen Fehler?

Turn on the authorization trace in transaction SE01 and repeat your
action. You will then see in the trace, which authorization checks
failed in detail, i.e. which token contexts were filtered from display
resp. were not revoked.

Vorgehensweise für Systemadministratoren

Fehlermeldungsextrakt aus SAP-System. Copyright SAP SE