The error message com.sap.esb.application.services.cxf.interceptor.SimpleAuthorizingInterceptor user is not authorized explicitly indicates an authorization failure. This means the user has been successfully authenticated, but lacks the necessary permissions to perform the requested action, which is sending a message to the integration flow endpoint. In SAP Cloud Integration, the ESBMessaging.send role is the standard authorization required for a sender system or user to call an integration flow and process a message. Assigning this role to the user will grant the required permission and resolve the error.

A: The issue is authorization (permissions), not authentication (identity verification). Changing the authentication method will not grant the required permissions to the user.

C: Redeploying an X.509 certificate relates to certificate-based authentication. The error message confirms authentication was successful, but authorization failed.

D: The knownhosts file is used for outbound SFTP/SSH connections to verify the identity of a remote server, which is irrelevant to an inbound message authorization error.

1. SAP Help Portal

SAP Integration Suite Documentation: In the section on "Roles and Authorizations

" the ESBMessaging.send role is defined. The description states: "Permission to process messages on the tenant. This role is required for a sender system to be able to call an integration flow endpoint." This directly confirms that the missing role is the cause of the authorization error. (See: SAP Help Portal -> SAP Integration Suite -> Administration -> Managing User Authorizations -> Tasks and Permissions -> Cloud Integration Related Roles).

2. SAP Help Portal

SAP Integration Suite Documentation: The documentation on setting up inbound communication describes the necessary steps

including assigning the ESBMessaging.send role to the technical user. It clarifies that this role is essential for any client application that sends messages to the integration tenant. (See: SAP Help Portal -> SAP Integration Suite -> Developing and Operating Integration Scenarios -> Setting Up Inbound Communication).