Hi there,
we have a problem while calling a script via rest api.
Following is configured:
- a new api systemuser ist created
- the api systemuser is assigned to a permissions group
- the permissions group...
...has view and insert rights on ADSGroup
...is assigned to common_startscripts and appserver_api
- the script is also assigned to the program fuctions common_startscripts and appserver_api
The Script is called CCC_Morpheus_Create_Tenant_ADSGroups and should create two ADSGroups.
When we call the script via api and an administrative systemuser, like my personal one, the script works fine.
If we switch to the api systemuser with least privilege permissions, the script can be called and returns the correct success message but nothing happens. If we enable the debugging inside our script, we can see that the adsgroup names are correctly formed and the success message will be sent but they wont got created in the database.
I think we are missing one special permisson, but we cant find it. The permissions gap between my personal systemuser and the new created api systemuser is to big.
I hope someone can help us.
best regards