Orchestrator HTTP request 403 when creating or deleting queues

Help Orchestrator
,
21

@Konrad, I tried with HTTP and it didn’t work there as well. Same 403 error. Seems like some settings or permissions issue that I may be having. But, thank you for making me try that out as well.

1 Like
22

image
image1194×920 54 KB

23

@bcorrea - I will definitely try that, but I am little confused on where in the documents it’s been mentioned that only “Robot” user role can only do that update on Machines? All it says is, a role with Machines.Edit can update the disable/enable machines. ‘Admin’ role(Screenshot below) that’s been assigned to me, has the Machines.Edit role, which is more than a ‘Robot’ role to my understanding and that’s where I am still confused on why ‘Robot’ role on my user role, has to have the Edit role on Machines, when I already have an Admin role(Screen shot below) ?

Or am I missing anything is understanding?

image
image1470×227 13.2 KB

image
image1048×693 37.8 KB

24

@bcorrea

Also, if I change the Robot role to have Machines.Edit role, all users who has access to ‘Robot’ role will get that capability to disable/enable machines which is not what I am looking for. I don’t think that’s a solution if that’s how it designed. Any thoughts?

25

Can you support that with official documentation, or an example?

26

If you are using a robot to make the request to disable machines, how can you not give its role the permissions? If you dont want to do that, you can also make the calls using standard http request call using another user.

27

@bcorrea - I believe you are not reading my entire comments. Could you please check two comments I posted above?

I have’ Admin’ role assigned as well which has ‘Machine.Edit’ permissions along with ‘Robot’ role. So my question is, with admin role, cant I enable/disable machines, since admin role has ‘Machines.Edit’ permissions?

1 Like
28

What i mean is, when you are using an activity in your process to try to disable a machine, the user that is doing the actions is the user that the robot is using, so the permissions of your user is not taken in account… Your user permissions apply only when you are in the Orchestrator web site and doing the actions yourself.

29

@bcorrea
you still haven’t answer my question from earlyer:
If the robot on MY machine (running in MY context) is not using MY account, then what account is it using, and how can i specify that accounts permissions?