How can I restrict REST API access for users in DX Netops Spectrum?

Products

• Spectrum
• Network Observability

Issue/Introduction

By default, any user can use the REST API in Spectrum. This can cause performance issues when excessive REST calls are used.  We need to be able to restrict the REST API access on a per user basis in OneClick.  Is there a privilege that will restrict users from launching REST queries?

Environment

Release: All Supported Releases

Resolution

Restrict OneClick RESTful Access to Users

As an administrator, you can allow or restrict the access to the OneClick RESTful APIs only to the DX NetOps Spectrum users. You can set API type-level access for GET, POST, PUT, and DELETE.

Additional Information

Note: If SAML/SSO is enabled, the API user account must exist in the local Spectrum user database to authenticate via Basic Authentication:

https://knowledge.broadcom.com/external/article/241320/can-saml-and-a-local-accout-coexist.html