Skip to main content
Solved

Flow App users accessing database connections

keithhastings
Contributor
Forum|alt.badge.img+9

Hi all,

I’m having an issue getting some Flow App users to be able to successfully write to an ArcGIS SDE database. I am getting the following error.

“An error occurred while attempting to retrieve the connection parameters from the connection file ‘SDE Connection’”

This had previously been working fine, but with the upgrade from 2022 to 2023, connecting to SDE now requires a stored database connection, which then gets uploaded when it is published. Previously, at 2022, I think it was just storing the UNC pathing to the SDE connection file, and as long as FME Flow had access to this folder, everything was fine.

Initially the App users were set up with Access permission to the Flow Workspace Apps, and nothing else. After a bit of hunting around I then added Access permission to the Connections, as this seemed like it might be necessary.

But unfortunately this seems to have made no difference, and the users are still getting the same error.

Are there any other permission requirements that are necessary for this workflow to work

 

Thanks

keith

 

Best answer by todd_davis

Hey Keith,

 

Its that token you need to update, rather than the users. That is, the users don’t need to have access to the connection, it is the token that needs access.

So you need to to find the token starting with Workspace App  ExternalUserName

under:

<server>/fmeserver/tokens/all

Then give that token the access to the connection.

Cheers,

Todd

 

 

View original
Did this help you find an answer to your question?

6 replies

redgeographics
Celebrity
Forum|alt.badge.img+48

It should be enough to grant access to the specific connection. Can you run the workspace on Flow as a regular, logged-in, user?

keithhastings
Contributor
Forum|alt.badge.img+9
  • keithhastingsContributor
  • Author
  • Contributor
  • June 13, 2024

Yes. In fact if I go into the log of the failed process, i can resubmit the job, and it works perfectly

todd_davis
Supporter
Forum|alt.badge.img+20
  • todd_davisSupporter
  • Supporter
  • June 13, 2024

Hey Keith,

 

When you say access, can I confirm that is access to the specific connection, rather than access to the broader connections. e.g.

 

The other one to confirm is to look at the parameter FME_SECURITY_ROLES in the log file, and just ensure that the token you are updating is the correct one.

 

Cheers,

Todd

keithhastings
Contributor
Forum|alt.badge.img+9
  • keithhastingsContributor
  • Author
  • Contributor
  • June 13, 2024

Hi Todd,

 

The access to the connections looks exactly like your example for each of the users. I have specifically shared the database connection to the users.

As for the FME_SECURITY_ROLES, I have 

--FME_SECURITY_ROLES' `["token:KHastings.Workspace<space>App<space>-<space>ExternalUserName"]'

I’m not exactly sure what I am expecting to see here, but the ExternalUsername bit does match the FME username that is trying to use the app.

 

Cheers

keith

todd_davis
Supporter
Forum|alt.badge.img+20
  • todd_davisSupporter
  • Supporter
  • Best Answer
  • June 13, 2024

Hey Keith,

 

Its that token you need to update, rather than the users. That is, the users don’t need to have access to the connection, it is the token that needs access.

So you need to to find the token starting with Workspace App  ExternalUserName

under:

<server>/fmeserver/tokens/all

Then give that token the access to the connection.

Cheers,

Todd

 

 

keithhastings
Contributor
Forum|alt.badge.img+9
  • keithhastingsContributor
  • Author
  • Contributor
  • June 14, 2024

Thanks Todd, that seems to be it.

None of those tokens had access, so I have added that, and will cross my fingers for the next bit of data that comes in.

I presume restoring the connection access is so convoluted because of the change in connection styles, and just creating something from scratch would be much more straightforward.

Cheers

keith

Reply


Helpful Members This Week

Community Stats

30,921
Posts
117,185
Replies
38,725
Members

Latest FME

Terms & ConditionsCookie settings

Cookie policy

We use cookies to enhance and personalize your experience. If you accept you agree to our full cookie policy. Learn more about our cookies.

 
Cookie settings
A product of
Safe Software respectfully acknowledges that we live, learn and work on the traditional and unceded territories of the Kwantlen, Katzie, and Semiahmoo First Nations.