cancel
Showing results for 
Search instead for 
Did you mean: 

permission require to access to restful API in Network Security Manager

Jump to solution

Hi There,

I tried to access the NSM resource by using API but the server says "Invalid credentials"

I follow step bellow:

1. get session and user_id by send request to https://<nsm_ip>/sdkapi/session

=> Login successful and send back session and user_id

2. Access to resource: by send request to https://<nsm_ip>/sdkapi/heartbeat with base64(session:user_id)

=> Server sent back "Invalid credentials"

My user has role Security Expert.

When I change the role of my user from Security Expert to Super User, I can access the resource (Server do not send back "Invalid credentials"). I tried with role IPS Administrator as well but the response is same with role Security Expert. Only Super User can access to the API.

So, anyone knows exactly permission require to access to the API?

Here is all permission of Super User:

Alert Assignment Supervisor

Alerts - View Packet Logs

Analysis - Edit

Analysis - View Only

Configuration Reports - IPS - Create

Configuration Reports - IPS - Run Only

Configuration Reports - NTBA - Create

Configuration Reports - NTBA - Run Only

Dashboard

Deploy Changes - IPS

Deploy Changes - NTBA

Devices - Edit

Devices - Edit

Devices - View Only

ePO Dashboard Data Retrieval

Event Reports - IPS - Create

Event Reports - IPS - Run Only

Event Reports - NTBA - Create

Event Reports - NTBA - Run Only

Guest Portal User Account Manager

IPS Policy - Edit

IPS Policy - View Only

Manage IPS - Edit

Manage IPS - View Only

Manage Manager - Edit

Manage Manager - View Only

Manage NTBA - Edit

Manage NTBA - View Only

NTBA Policy - Edit

NTBA Policy - View Only

Run Vulnerability Scan

TA Alerts - Manage

TA Alerts - View Only

TA Dashboards - General Monitors - Create

TA Dashboards - General Monitors - View Only

TA Dashboards - IPS Monitors - Create

TA Dashboards - IPS Monitors - View Only

TA Dashboards - NTBA Monitors - Create

TA Dashboards - NTBA Monitors - View Only

TA Edit IPS Policy

TA Edit NTBA Policy

TA Endpoints - Manage

TA Endpoints - View Only

TA Retrieve ePO Data

User Auditing - Edit

Users and Roles - Edit

Users and Roles - View Only 

Thanks for your help

1 Solution

Accepted Solutions
d_aloy Reliable Contributor
Reliable Contributor
Report Inappropriate Content
Message 2 of 3

Re: permission require to access to restful API in Network Security Manager

Jump to solution

Hi there

As per API documentation, you need a Super User role to access the SKD APIs:

Regards

David

View solution in original post

2 Replies
d_aloy Reliable Contributor
Reliable Contributor
Report Inappropriate Content
Message 2 of 3

Re: permission require to access to restful API in Network Security Manager

Jump to solution

Hi there

As per API documentation, you need a Super User role to access the SKD APIs:

Regards

David

View solution in original post

Re: permission require to access to restful API in Network Security Manager

Jump to solution

Hi,

Thanks for your information.

I read the API document but did not heed this line.

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community