REST API account with read-only access to all tables

[paulyams]

Hello,

We've been trying to use an SN account with rest api access to show information on our incidents/problems/etc within another application. However, when using this user, we only get empty search results, indicating that the user does not have the proper privileges assigned. How can we create a SN user that has read-only access to all tables?

Thanks,

Paul

[masza]

Hello Paul,

I believe that this user should have "Web service access only" checkbox markes as true on sys_user table record. Also he need to have a proper role for example - "rest".

You can also check this, if you will still have issues: REST API table access

Regards,

Marcel

[paulyams]

Hi Marcel,

Thanks for taking the trouble to help out i try it and let you know.

Regards,

Paul

[Dave Smith1]

How can we create a SN user that has read-only access to all tables?

Adding a read-only ACL that works against *.*

- however, I'd severely caution against this.   You don't need read-only access to ALL tables, you really only need read-only access to specific tables.

Granting blanket accessibility like this not only violates the Principle of Least Security, but could also put you in contravention to your organisational confidentiality policies.

Good security takes some time to define the correct model, but it's well worth it.   Take short-cuts at your peril!

[jarodm]

I would also advise looking into the `snc_read_only` role.

Reference: Read-only role