topic Re: 401 Unauthorized Request when sending request to SAS CI360 using REST API in SAS Customer Intelligence

401 Unauthorized Request when sending request to SAS CI360 using REST API

Saad360 — Wed, 15 Jul 2020 18:16:03 GMT

Hi all,

I'm going through the CI360 Bootcamp (Engage Ex00) and I'm facing an error (please see last screenshot) when attempting to send a POST request to CI360 using the REST API (using Postman).

The steps described in the Bootcamp to create API Access are a little bit different compared to the current release of CI360 as it is now found under settings, and the username appears to be different as well (email now instead of tenant id previously). Since this appears to be an authentication issues, I'm guessing it might be related to that change.

Please let me know if you have any insights into this, and thank you very much for your time.

Best,

Saad

Re: 401 Unauthorized Request when sending request to SAS CI360 using REST API

OlafKratzsch — Wed, 15 Jul 2020 18:33:07 GMT

The API User credentials you are creating under the User -> Settings in the top right hand corner are solely for the PLAN APIs which require a user context. For all Other APIs that don't use a JWT you need to create credentials under General Settings -> External -> API Users

Re: 401 Unauthorized Request when sending request to SAS CI360 using REST API

Saad360 — Wed, 15 Jul 2020 19:02:41 GMT

Thank you Olaf for your quick reply.

Indeed that's the guideline in the Bootcamp exercice, but I couldn't find API Access in the settings as shown in the screenshot below, I assumed that it was moved to the user settings.

Best,

Re: 401 Unauthorized Request when sending request to SAS CI360 using REST API

OlafKratzsch — Wed, 15 Jul 2020 19:33:47 GMT

You have to be a 'SAS Administrator' in AppCentral for that tenant and thus a tenant Super User. These are the only user that can manage access capabilities (Roles, Groups, API Users). Having the role of 'Configuration Admin' is not sufficient.
We moved the ability of managing API Users from the 'Configuration Admin' to the Super User earlier this year to tighten up security so that not everyone who has access to the settings can define API Users

Re: 401 Unauthorized Request when sending request to SAS CI360 using REST API

Saad360 — Wed, 15 Jul 2020 20:48:29 GMT

Thank you Olaf for your answers!

I managed to contact support to change the role and fixed the issue.

Best,