Failed API level ACL Validation

_navin9898
Tera Expert

Hi Team,

Good Day!

I am seeing an issue where we are getting below error message in response, whenever hitting table API (incident) in order to create an incident.

{  
   "error":{  
      "message":"User Not Authorized",
      "detail":"Failed API level ACL Validation"
   },
   "status":"failure"
}

We are using oAuth 2.0 as authentication protocol in order to grant access to API resource. If I use baisc auth then it is working as expected.  Could someone please let me know what could be the issue.

Best Regards,

Naveen

1 ACCEPTED SOLUTION

Tony Chatfield1
Kilo Patron

Hi, , are you able to retrieve an oauth2 token from the instance?
If integration works for basic auth but not oAuth2 using the same user account, then I would suspect that your oauth is not configured correctly, but with no visibility is is not possible to assess based on your post.
If you are not testing with the same user account then the observation that it works for basic but not oauth may not be relevant. In which case have you checked and confirmed that the table is configured to allow web access

Application Access Web Services | ServiceNow Developers

and that the user account used for oauth is configured with correct roles for WEB access,
and that you do not have any ACL's preventing access to the table for the integration user?

View solution in original post

2 REPLIES 2

Tony Chatfield1
Kilo Patron

Hi, , are you able to retrieve an oauth2 token from the instance?
If integration works for basic auth but not oAuth2 using the same user account, then I would suspect that your oauth is not configured correctly, but with no visibility is is not possible to assess based on your post.
If you are not testing with the same user account then the observation that it works for basic but not oauth may not be relevant. In which case have you checked and confirmed that the table is configured to allow web access

Application Access Web Services | ServiceNow Developers

and that the user account used for oauth is configured with correct roles for WEB access,
and that you do not have any ACL's preventing access to the table for the integration user?

Many thanks for your response. Your answer has redirected me to right direction.

 

Best Regards,

Naveen