Error User does not have process_incidents privileges for the objects <number> when running the responseRuleDetails API.

Products

• Data Loss Prevention
• Data Loss Prevention Enforce
• Data Loss Prevention API Detection

Issue/Introduction

First use the Get All Response Rules API to get an object ID for one of the Smart Response rules.
You can also use the Get All Smart Response Rules API.
Then use the smart response rule's object ID in the responseRuleDetails API to try to get the details for that response rule.

The API "responseRuleDetails" fails to list any data about the response rule and returns a "401 Unauthorized" error.
Status: 401
Message" User does not have process_incidents privileges on the objects <object ID>
i18nKey: enforce.objects.ids.not.authorized
parameters:
0: process_incidents
1:<object ID>

Cause

By default, the responseRuleDetails API does not have access to the smart response rules. 
Also, the responseRuleDetails API does not have access to the built-in response rules.

Resolution

To grant the responseRuleDetails API access to the smart response rules, do the following:

1. Open the API user role, System > Login Management > Roles.
2. The API user role in the Enforce console shows the available Smart Response Rules in the "Available Smart Response Rules" window.
3. Move the desired smart response rules to the "Smart Response Rules for execution" window by clicking on the blue circle with the white plus sign, then save the role.
4. After moving the desired rules, those rules will then return results in the responseRuleDetails API.

In the following example, the two smart response rules have been moved to the "Smart Response Rules for execution" window.

 

The responseRuleDetails API cannot be given access to the built-in response rules.