Support Article
Insufficient privileges message when using queue_processors api
SA-93691
Summary
User is leveraging the Pega API's to set up monitoring for Agents and Queue Processors. This is performed using basic Authentication where the corresponding operator Access Group has 'PegaRULES:SysOpsObserver' and 'PegaRULES:PegaAPI' roles. The Agents API works correctly; however, the Queue Processor API displays an 'Insufficient privileges' error.
The below API is used to obtain Queue Processor status:
https://127.0.01/prweb/api/v1/nodes/all/queue_processors
Error Messages
Insufficient privileges
Steps to Reproduce
Invoke the Pega API URL for Queue Processor with basic authentication.
https://127.0.01/prweb/api/v1/nodes/all/queue_processors
Root Cause
An issue in the application code or rules.
The Access Role used, did not have the pzSystemOperationsObserver privilege.
Resolution
Perform the following local-change:
Add the pzSystemOperationsObserver privilege to the Operator's Access Role.
The PegaRULES:SysOpsObserver Access Role is updated in Pega Platform 8.3 to include the pzSystemOperationsObserver privilege.
Published July 25, 2020 - Updated December 2, 2021
Have a question? Get answers now.
Visit the Collaboration Center to ask questions, engage in discussions, share ideas, and help others.