End user with Basic Auth gets 403 Forbidden for API call that works for Administrator | Community
Skip to main content

End user with Basic Auth gets 403 Forbidden for API call that works for Administrator

  • November 3, 2021
  • 2 replies
  • 0 views
Ross15

I am having difficulty configuring our ZenDesk system to permit End Users (users in partner Organizations) to authenticate and make API calls to list and create tickets associated with their organization.

Using Postman and Basic Auth, I can make a successful GET request to /api/v2/organizations/:org_id/tickets with my admin account, "/token" suffix, and associated API token.

Using the exact same request, but with an account assigned to the partner organization (and associated suffix and API token) corresponding to the :org_id, the request fails with status 403 Forbidden.

Therefore, I am assuming this must be some basic permission-based issue, but I cannot find any appropriate setting to allow the End User to successfully authenticate and complete the request.

Note, both accounts (successful and failing) have unique verified primary email addresses.

Can anyone provide information or tips that might help me resolve this?

    2 replies

    Greg29
    • Greg29
    • November 3, 2021
    Hi Ross! The reason that you're running into this issue is because behind the scenes of that API call, you're actually hitting the Tickets endpoint, which is restricted to agents and admins. You can see that in our reference docs.

    In order to provide access to end users, you will need to use the Requests endpoint, which is allowed for end users. In use, all you will have to do is replace the the /tickets portions with /requests and you should be all set!
    Ross15
    • Ross15
    • Author
    • November 3, 2021

    I knew it had to be something simple, but I completely missed both the opening "Tickets and Requests" info and that "Allowed For" note. Using the Requests endpoint worked great, thank you!

    Terms & ConditionsCookie settingsAccessibility statement