403 forbidden error returned by /createrequest while trying to create new account

[Anurag]

I am getting below error while trying to provision account to a user using native api /createrequest.

The logged in user has sav role as ROLE_ENDUSER with all the webservice accesses assigned in the sav role.

Have also added below feature accesses to sav role

Same API works fine when tried with ADMIN user. 

[prasannta]

Hi @Anurag 

This is a known issue and has been fixed in v23.4. Once you upgrade to this version, this issue will be resolved.

Thanks

[prasannta]

Alternatively, Can you try assigning the Privileged access feature to the SavRole and validate if this works.

[Anurag]

Hi Prasannta,

I am able to create a request after adding the privileged access. Is there any known impact of adding this access to endusers?

[rushikeshvartak]

Request URL comes under 

Adding Privileged Access will provide additional 76 URLs access, Please review same before providing access 

[prasannta · Accepted solution]

Hi @Anurag 

There is no known impact at this point, The ideal approach would be to upgrade the environment to avoid any unknown issues. This solution is just a workaround to resolve the issue till your environment is upgraded. 

Thanks