These docs are for v20.3.44. Click to read the latest docs for v20.3.186.

Discussions

Ask a Question
Back to All

REST API: Non-admins unable to see organization information

We are running iMIS version 20.3.30.4688 and using the REST API and SSO.

I am able to get a correct access token for a non-admin user and am able to make requests as the user about their own information, however any requests to get information about their organization results in a "Does not have required permission. (O)" message from the API.

If the access token is for a user that has organization admin role, the request works. If the access token is for a non-admin user the request responds with the message above.

I would understand this response if we were trying to update the company, but this is just to get the company information.

The endpoint I am making the request to is:
GET https://isa.imiscloud.com/api/Party/:PartyId

And getting the text string response:
Does not have required permission. (O)

I thought this may have something to do with possible permissions or visibility on the Party, but didn't find anything that would seem to fix it.

Thanks!
Brian