How To Fix ESH_HANA_ADMIN210 - Cannot map authorization check &1 via ESHCLIENT

SAP Error Message - Details

• Message type: E = Error

• Message class: ESH_HANA_ADMIN - ESH HANA Index Administration

• Message number: 210

• Message text: Cannot map authorization check &1 via ESHCLIENT

What causes this issue?

One of the modeled authorization checks for the given ESH search
connector cannot be created.
A table mapping via field ESHCLIENT cannot be generated.

The system issues an error message and will not allow you to continue with this transaction until the error is resolved.

Reason for the issue:
The table for the affected object node is not client-dependent.
The table does not possess a <MANDT>/<CLIENT> attribute which can be
used for the mapping.

System Response

In the table-based scenario some authorization checks require a mapping
from the application table to the authorization check table or to an
intermediate link table (e.g. ESH_HDB_MAP) via the client attribute.
These authorization checks can only be generated for client-dependent
tables.
If the application table is not client-dependent the connector cannot be
created.

How to fix this error?

The issue is typically a modeling issue.
If the affected search model is delivered by SAP contact the SAP support
(component which is owning the search model).
If the issue occurs for a self-created custom search model ensure that
the model node is based on a client-dependent table, of remove/modify
the authorization check causing the issue.

Procedure for System Administrators

The issue occurs for table based models only.
Affected scenario: Enterprise Search on HANA only.
Authorization checks with explicit field mapping (i.e. which contain at
least one authorization object attribute which is mapped to a search
model node attribute) do not require the mapping vie ESHCLIENT.

Error message extract from SAP system. Copyright SAP SE.

Smart SAP Assistant

• What is the cause and solution for SAP error message ESH_HANA_ADMIN210 - Cannot map authorization check &1 via ESHCLIENT ?

  The SAP error message ESH_HANA_ADMIN210 indicates that there is an issue with mapping an authorization check in the context of the Enterprise Search (ESH) and HANA database. This error typically arises when there is a problem with the authorization settings or the configuration of the ESH client.
  Cause:
  
  Authorization Issues: The user may not have the necessary authorizations to perform the action related to the ESH client.
  Configuration Problems: There may be a misconfiguration in the ESH client settings or the underlying HANA database.
  Missing Roles: The required roles or privileges for accessing certain data or functionalities may not be assigned to the user.
  Client-Specific Settings: The ESH client may not be properly set up or may be missing necessary mappings for authorization checks.
  
  Solution:
  
  
  Check User Authorizations:
  
  Ensure that the user encountering the error has the appropriate roles and authorizations assigned. This can be done by checking the user’s roles in transaction SU01 or using transaction PFCG to review role assignments.
  Specifically, look for roles related to ESH and HANA access.
  
  
  
  Review ESH Client Configuration:
  
  Verify the configuration of the ESH client in transaction EHS_CLIENT. Ensure that all necessary settings are correctly configured.
  Check if the ESH client is properly linked to the HANA database and that the necessary mappings are in place.
  
  
  
  Check for Missing Mappings:
  
  If the error indicates a specific authorization check that cannot be mapped, investigate whether that check is defined in the system and whether it is correctly linked to the ESH client.
  
  
  
  Consult SAP Notes:
  
  Search for relevant SAP Notes that may address this specific error. SAP frequently releases notes that provide fixes or workarounds for known issues.
  
  
  
  System Logs and Traces:
  
  Review system logs and traces for additional details that may provide insight into the root cause of the error. This can be done using transaction SLG1 for application logs.
  
  
  
  Contact SAP Support:
  
  If the issue persists after checking the above points, consider reaching out to SAP Support for further assistance. Provide them with the error message details and any relevant logs.
  
  
  
  Related Information:
  
  
  Transaction Codes:
  
  SU01: User Maintenance
  PFCG: Role Maintenance
  EHS_CLIENT: ESH Client Configuration
  SLG1: Application Log
  
  
  
  Documentation: Refer to the official SAP documentation for Enterprise Search and HANA for detailed information on configuration and authorization management.
  
  
  SAP Community: Engage with the SAP Community forums to see if other users have encountered similar issues and what solutions they have found.
  
  
  By following these steps, you should be able to diagnose and resolve the issue related to the ESH_HANA_ADMIN210 error message.