I have Organization admin access and administrator access in Orchestrator. Orchestrator is cloud-based. We operate in a Citrix server environment with a machine template. I am trying to programmatically (API calls) put 1 set of host machines into maintenance mode and take another set out. That is working fine. What I cannot do is disable the licenses on the set going into maintenance mode and enable on the set coming out. It says I am not authorized.
I am using an External application with a bearer token - again, working perfectly for maintenance mode. I have given the Ext app OR.License, OR.Machines, OR.Robots Application and User scopes. In the Tenant, I gave the application Orchestrator Administrator role. But, whenever I check the Tenant level access for the application, License.Edit is still missing and unavailable to check.
If I try from the Swagger, it works just fine. I can enable or disable the license on the host machine like I would expect. How do I make this work??
I am using Studio 2025.10.3 to develop the API and running it in dev so from my account.
external apps cannot get License.Edit. Cloud Orchestrator allows license enable/disable only through an interactive user token. Swagger works because it uses your user session, not the external app. Use a user token or PAT instead.
Automation Cloud - Managing external OAuth applications
Happy Automation
Does that mean I should use the Orchestrator HTTP activity rather than the generic HTTP activity I had to use for Maintenance Mode? Again, I am trying to do this in an unattended, time triggered workflow.