eccentex | 2020-07-15 16:26:45 UTC | #1
Hi, I am trying to configure an agent role with the correct permissions to allow the premium app and underlying apis used by the premium app. These are pretty much all the same apis used by the example premium app.
Attached file contains the scope config for the oauth. If I grant various view permissions the premium app starts working, however, the admin menu appears with the various options.
Can someone please explain how the permissions and scope in the premium app work together and how I can grant the permissions needed for premium app to execute without getting various api errors:
Thank you.
tim.smith | 2020-07-15 20:57:06 UTC | #2
A scope is assigned to an OAuth client and controls which API resources an access token may make requests to; if the OAuth client used to generate the access token lacks the scope for an API request, the response will be an error stating that the required scope has not been granted to the OAuth client.
A permission is assigned to a role, which is assigned to a user or client credentials, and controls what operations that specific user or client credentials may perform. If the access token used to make the request lacks the required permission, the response will be an error stating that the required permission has not been assigned.
For an API request to be successful, the auth token must have both the required scope configured on the OAuth client and permissions assigned to the user or client credentials.
eccentex | 2020-07-29 22:03:58 UTC | #3
Thank you Tim, I learned that I had to separate the Install Wizard checks that are together in the example premium supervisor app. In order to do any of the wizard config checks the agent would need that role/permissions. By separating the apps out, I am able to have the Wizard run by an admin type role, while the agent now just needs the premium app role/permissions, however, there are no config checks anymore, it is working. :slight_smile:
system | 2020-08-29 22:02:34 UTC | #4
This topic was automatically closed 31 days after the last reply. New replies are no longer allowed.
This post was migrated from the old Developer Forum.
ref: 8291