https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/api-key-required-permissions-for-file-retrieval/m-p/537250#M4010 <P>Hi&nbsp;<a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/279034">@Kevhardy</a>,</P> <P>&nbsp;</P> <P>I just created a new role with only the <CODE>Action Center View/Edit &gt; File Retrieval</CODE> permission assigned and made a request to this endpoint successfully. Is that permission granted to the role assigned to your API key?</P> <P>&nbsp;</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="timurphy_0-1680274401357.png" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/49180i8ADCA3132CA5053E/image-size/medium/is-moderation-mode/true?v=v2&amp;px=400" role="button" title="timurphy_0-1680274401357.png" alt="timurphy_0-1680274401357.png" /></span></P> Fri, 31 Mar 2023 15:01:55 GMT timurphy 2023-03-31T15:01:55Z https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/api-key-required-permissions-for-file-retrieval/m-p/537248#M4009 <P>Hello,</P> <P>&nbsp;</P> <P>Is there further documentation on what the required permissions and API key needs for the File Retrieval action?</P> <P>&nbsp;</P> <P><A href="https://cortex-panw.stoplight.io/docs/cortex-xdr/058f77d40dd35-retrieve-file" target="_blank">https://cortex-panw.stoplight.io/docs/cortex-xdr/058f77d40dd35-retrieve-file</A></P> <P>&nbsp;</P> <P>We have a provisioned an API key and gave it all the permissions we could yet the API is still returning a 403 response stating insufficient permissions. Which RBAC permissions is required for this action?</P> <P>&nbsp;</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Kevhardy_0-1680273339391.png" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/49179i78C23D821E066265/image-size/medium/is-moderation-mode/true?v=v2&amp;px=400" role="button" title="Kevhardy_0-1680273339391.png" alt="Kevhardy_0-1680273339391.png" /></span></P> <P>&nbsp;</P> <P>Thank you.</P> Fri, 31 Mar 2023 14:36:18 GMT https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/api-key-required-permissions-for-file-retrieval/m-p/537248#M4009 Kevhardy 2023-03-31T14:36:18Z https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/api-key-required-permissions-for-file-retrieval/m-p/537250#M4010 <P>Hi&nbsp;<a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/279034">@Kevhardy</a>,</P> <P>&nbsp;</P> <P>I just created a new role with only the <CODE>Action Center View/Edit &gt; File Retrieval</CODE> permission assigned and made a request to this endpoint successfully. Is that permission granted to the role assigned to your API key?</P> <P>&nbsp;</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="timurphy_0-1680274401357.png" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/49180i8ADCA3132CA5053E/image-size/medium/is-moderation-mode/true?v=v2&amp;px=400" role="button" title="timurphy_0-1680274401357.png" alt="timurphy_0-1680274401357.png" /></span></P> Fri, 31 Mar 2023 15:01:55 GMT https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/api-key-required-permissions-for-file-retrieval/m-p/537250#M4010 timurphy 2023-03-31T15:01:55Z