API auth REST vs SOAP

BBagent — Thu, 20 Mar 2025 12:23:03 GMT

I'm having an issue authenticating via RESTful API, PAN OS version 11.1

Using SOAP to fetch my API key, then storing it here

$header = @{
"X-PAN-KEY" = $apikey
}

Then Invoke-Restmethod like this

Invoke-RestMethod -Uri $newURI -Method get -ContentType "application/json" -Headers $header

URI is https://ip_address/restapi/v11.1/Device/VirtualSystems

error message

Invoke-RestMethod : {"code":7,"message":"Unauthorized","details":[{"@type":"CauseInfo","causes":[{"code":5,"module":"panui_auth","description":"Unauthorized"}]}]}

I don't have any trouble pulling that data when I use SOAP like this

/api?key=$apikey&type=op&cmd=<show><devices><connected></connected></devices></show>

Re: API auth REST vs SOAP

ozheng — Wed, 02 Apr 2025 04:48:41 GMT

Hello @BBagent ,

Based on the error message, is the account you are using has the rights on the REST API (for custom role)?

https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-panorama-api/get-started-with-the-pan-os-rest-api/pan-os-rest-api-error-codes

(you can try to set a new custom role with all the REST API set to allowed, then assigned to the account you are using for the API calls and check)

Olivier

topic API auth REST vs SOAP in Next-Generation Firewall Discussions

API auth REST vs SOAP

Re: API auth REST vs SOAP