Skip to main content

ServiceNow API permissions issue--InsufficientPermissionException--Insufficient privileges detected--External User Not Authorized

 ServiceNow API permissions issue

issue when attempting to update/create a sys_user record via API call into the instance:

: [ InsufficientPermissionException ] [ Possible suggestions ] Furnish appropriate permissions to the user. [ Error details ] Insufficient privileges detected. Status: 403 , Output: External User Not Authorized, Detail: , Status: failure

Resolution:

It seems, either during the zboot, or the clone, the sandbox instance lost the roles that are enabled when the high security plugin is installed (snc_internal and snc_external). I copied the roles from our dev instance over to the sandbox instance and then added all users to the snc_internal role. This solved the problem with the app and update set pickers, it might resolve this API issue also as I believe that snc_internal is required for the REST API’s.

 

Comments

Popular posts from this blog

ServiceNow check for null or nil or empty (or not)

Haven't tested these all recently within global/local scopes, so feel free to have a play! option 1 use an encoded query embedded in the GlideRecord , e.g.  var grProf = new GlideRecord ( 'x_cls_clear_skye_i_profile' ); grProf . addQuery ( 'status=1^ owner=NULL ' ); grProf . query (); even better use the glideRecord  addNotNullQuery or addNullQuery option 2 JSUtil.nil / notNil (this might be the most powerful. See this link ) example: if ( current . operation () == 'insert' && JSUtil . notNil ( current . parent ) && ! current . work_effort . nil ())  option 3 there might be times when you need to get inside the GlideRecord and perform the check there, for example if the code goes down 2 optional routes depending on null / not null can use gs.nil : var grAppr = new GlideRecord ( 'sysapproval_approver' ); var grUser = new GlideRecord ( 'sys_user' ); if ( grUser . get ( 'sys_id' , current . approver )){...

Code a pause/wait - gs.sleep or gs.wait alternative, pause script for specified seconds (timer)

Code a pause/wait - gs.sleep / gs.wait alternative, pause script for specified seconds (timer)  e.g. 10 seconds: do_sleep ( 10000 ); function do_sleep ( milliseconds ) { var start = new Date (). getTime (); for ( var i = 0 ; i < 1e7 ; i ++) { if (( new Date (). getTime () - start ) > milliseconds ){ gs . print ( 'waking up!' ); break ; } } }