DLP Enforce REST API: "403 Forbidden: User does not have configure_policy privilege"

Products

• Data Loss Prevention

Issue/Introduction

When executing REST API commands against the DLP Enforce Server, the API client receives an HTTP 403 Forbidden error.

Environment

16.x
Enforce Server REST API

Cause

The DLP Enforce user account and its assigned Role lack the specific administrative privileges required to access, view, or modify policy objects via the REST API. This occurs even if the user is authenticated, as the Enforce RBAC (Role-Based Access Control) prevents the specific action.. 

Resolution

 

• Ensure the role-based permissions (as detailed in the technical documentation) are correctly assigned.

• Wait 1–2 minutes after saving for the new privileges to propagate through the Enforce services.

• Retry the API command from your client (e.g., Postman or cURL).