403 error on API key with full permissions #1446

New Issue

MrUnknownDE · 2026-04-05T19:28:31+02:00

MrUnknownDE commented

2026-04-05 19:28:31 +02:00

Originally created by @kmanwar89 on 5/26/2025

I'm trying to use the API for some programmatic/bulk adding of resources that all share a similar ruleset, without having to duplicate 2/3 dozen times. While reading through the Swagger docs, I'm trying to just do the simplest possible test - a GET to /orgs to get the Org ID, but each time I do it (through the Web UI or curl commands) I'm greeted with a 403: Key does not have root access error.

I created the API key with 100% wide open permissions, and am confident it has permissions to GET the orgs. I tried a different key with all permissions selected under the org; same issue.

I assumed it was Crowdsec banning my WAN IP (it was, for some reason), so I tried it again after removing all Crowdsec references from my compose file and traefik configs - no dice.

Any ideas on this one? I searched for others with the same issue, but their symptoms and resolutions were quite different.

Screenshot of error in the Swagger UI:

And screenshot of API permissions:

*Originally created by @kmanwar89 on 5/26/2025* I'm trying to use the API for some programmatic/bulk adding of resources that all share a similar ruleset, without having to duplicate 2/3 dozen times. While reading through the Swagger docs, I'm trying to just do the simplest possible test - a GET to /orgs to get the Org ID, but each time I do it (through the Web UI or `curl` commands) I'm greeted with a `403: Key does not have root access` error. I created the API key with 100% wide open permissions, and am confident it has permissions to GET the orgs. I tried a different key with all permissions selected under the org; same issue. I assumed it was Crowdsec banning my WAN IP (it was, for some reason), so I tried it again after removing all Crowdsec references from my compose file and traefik configs - no dice. Any ideas on this one? I searched for others with the same issue, but their symptoms and resolutions were quite different. Screenshot of error in the Swagger UI: ![Image](https://github.com/user-attachments/assets/7ee74c31-a42a-4655-b45b-32de3cba00c7) And screenshot of API permissions: <img width="1415" alt="Image" src="https://github.com/user-attachments/assets/82d338c9-11f8-438b-af80-7ed8f922a410" />

MrUnknownDE closed this issue

2026-04-05 19:28:31 +02:00

Sign in to join this conversation.

Branches Tags

main

dev

dependabot/npm_and_yarn/dev-minor-updates-b4e5d6b9c5

revert-2766-feature/systemd-install-instructions

dependabot/npm_and_yarn/prod-patch-updates-05702d39f2

dependabot/npm_and_yarn/next-16.2.1

dependabot/npm_and_yarn/recharts-3.8.1

alerting-rules

private-site-ha

dependabot/docker/docker/library/node-25-slim

ssh

delete-account

msg-delivery

org-only-idp

cicd

patch

site-targets-auto-login

No Label

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github/pangolin#1446