Required Permissions

Certain operations may required specific permissions for the SuccessFactors service account. The operations are listed below along with the necessary permissions.

Operation

Required permissions

Test Connection

Test Connection Permissions

Aggregation

Test Connection and Aggregation Permissions

Provisioning

Test Connection, Aggregation, and Provisioning Permissions

These steps provide the basic information for assigning permissions to a role in SuccessFactors. For current detailed information about role-based permissions, refer to the SuccessFactors User Assistance Documentation.

  1. In the Permission Settings section, select the Permission button to specify the permission you want to assign to the role.

    The Permission Settings window displays.

  2. The available permission categories are listed on the left side of the page. Select a permission category to view the different available permissions.

  3. Select the permissions you'd like to grant to the role.

  4. Select Done when you finish marking your selections.

  5. Select Save Changes.

Category

Permission

General User Permission

SFAPI User Login

Employee Central API

Employee Central HRIS SOAP API

Note

  • The Manage Role-Based Permission Access permission is needed to fetch Roles and Group objects. If you do not want to provide the Manage Role-Based Permission Access permission, Roles and Groups attributes need to be removed from the account schema object.
  • The Manage User to Employee Export permission does not need to be provided on the service account if you only want to aggregate users from the SuccessFactors system and not the employees. If this is the case you must add the General User Permission to Company Info Access > User Search mandatory permission.

Category

Permission

Manage User

Employee Export

Metadata Framework

Admin Access to MDF OData API

Manage System Properties

Picklist Management and Picklists Mappings Set Up

Employee Central API

Employee Central Foundation OData API (read-only)

Employee Central HRIS OData API (read-only)

NA

Manage Role-Based Permission Access

General User Permission

Company Info Access > User Search

For more information, refer to Aggregating External Users.

Category

Permission

Employee Central Import Settings

Import Employee Data

Employee Central API

Employee Central HRIS OData API (editable)

To perform the group aggregation for the manually added group schema attributes, perform the following steps to provide the Manage Role-Based Permission Access to the service account:

  1. Go to Admin Center and search for Manage Role-Based Permission Access.

  2. Select Add User.

  3. Search through User Name and select the required user.

  4. Select Grant Permission.

To aggregate external users, add the User Search permission to the role along with all required permissions. Once you have granted permissions to the given role, perform the following steps:

  1. Go to Admin Center and search for Manage Permission Roles.

  2. Select the permissions role you created.

  3. Go to the grant this role to section.

  4. Select Add for external target population.

  5. Go to Define whom you want to grant this role permission to, and then select Permission Group.

  6. Go to Specify the target population whom the above granted users have permission to access, and then in the Target Population section, select the User Type as External Onboarding User.

  7. Select Everyone (External Onboarding User) .

  8. Select Done and Save the changes.