REST API /API/rest/v1/tasks Returns the Error “You do not have sufficient permissions to complete the operation.” (VMO61008). Cause and Solution?
1. Environment:
-
XProtect Professional+ 2024 R2
-
Windows Server 2025 Datacenter Edition
-
In the Security Roles settings of the Management Client’s left pane, the security settings for the relevant username are configured with Full Control, Connection, Status API, and User Authentication all set to Allow.
2. Steps to Reproduce:
2.1 Obtain a token:
curl --insecure --request POST “https://127.0.0.1/API/IDP/connect/token” --header “Content-Type: application/x-www-form-urlencoded” --data-urlencode “grant_type=password” --data-urlencode “username=XXXXX” --data-urlencode “password=YYYYYY” --data-urlencode “client_id=GrantValidatorClient”
Response:
{“access_token”:“”,“expires_in”:3600,“token_type”:“Bearer”,“scope”:“managementserver”}
2.2 Use the obtained token to GET tasks:
curl --insecure --request GET “https://127.0.0.1/API/rest/v1/tasks” --header “Authorization: Bearer ”
2.3 Receive the following error response:
{“error”: {“httpCode”: 403, “details”: [{“errorText”: “You do not have sufficient permissions to complete the operation.”, “errorTextId”: “VMO61008”}]}}
What could be the cause of this issue, and how can it be resolved?