How to give user access in ION to call an API

Darko Gjorgjiev

Hi,

I have a question regarding calling an API for an application defined in API Gateway through Postman. The client defined an application in API Gateway and gave us the file so that we can make call to the API and do some tests. It is a Backend Service.

In Postman, we are configuring everything according to the official documentation by Infor, hitting "Get new access token" which is successfull and assigning it.

However, when executing any of the endpoints, we are getting an 403 error: "User does not have access to requested tenant resource."

Since they created the app and provided us the file, i am suspecting that the Service Account which was defined when the credentials were downloaded does not have the rights to execute this request, since we are using those same credentilas in Postman.

I would greatly appreciate it if someone could provide another perspective or point of view on this issue.

Thanks,
Darko

Brandon Watson

Hello Darko - It depends on which exact Suite you are trying to hit, but at a minimum you need IONAPI-User, which gives you access to the call any of the Suites. There could be further security you need. For example, if you are calling IDM API's, you would need proper access for the call(s) you are trying to do.