ASM - Ability to run ASM API's with non-prod accounts
Article ID: 207659
Updated On:
Products
Issue/Introduction
The admin account has credits to run ASM API's.
When using any non-prod account to run ASM API's get the error, ' insufficient credits'.
{"version":"10.6.0.5\/10.6.0.7","code":1009,"error":"insufficient credits","info":"need 1 check credit(s), you have 0.","elapsed":"16.6440"}
Available API credits:
Environment
Release : 10.6
Component : CA APP SYNTHETIC MONITOR (WATCHMOUSE)
Cause
Customer must use the parent accounts credentials.
If they do not want to share API credentials with their subaccount, then they can generate a permanent token and use the token instead.
Resolution
Can either use a very simple mechanic of an API token
https://api.asm.saas.broadcom.com/v3/#/api-token/api-token-create
This can be generated once with infinite or a very long duration and shared with subaccounts
Or the more complex but secure mechanic of OAuth2, with a short-lived access token and a longer lived refresh token
https://api.asm.saas.broadcom.com/v3/#/oauth/oauth-create-token
Additional Information
Feedback
