Restrict the API access to only GET Method

[Lucky1]

Hello all,

Good day!

I got a task to create a table API on task table and then create a user for this where I can use this account for authentication.

So, the user should be able to only Get the task data, like Incident or Change requests or Catalog tasks data but he should not be able to update or delete the data in those tables.

(the user should only be able to read the data but not modify it)

So, can someone provide me the steps to achieve this please?

Regards,

Lucky

[Robert H · Accepted solution]

Hello @Lucky1 ,

Thanks for the feedback. Since your original question has been answered it should also be marked as such.

Regarding your additional question, as per the OOTB ACLs the Transaction Log table can only be accessed by users with the admin role. So you would either have to grant that role to the integration account (not recommended), or you create a new Role (e.g. "transaction.read") and a "Read" ACL for the syslog_transaction table that requires this role. Then grant the role to the integration account.

Regards,

Robert

[Robert H]

Hello @Lucky1 ,

Thanks but I think you should rather mark the first answer as correct, since it is answering the actual question that you started this thread with. Otherwise other community members might get confused.

Regards,

Robert