Adobe I/O API Call Access Denied

Avatar

Avatar

punit-khatri

Avatar

punit-khatri

punit-khatri

18-12-2020

I am trying to trigger the pipeline which is created at Cloud Manager through Adobe I/O api. I have followed below steps

1. Created Integration at developer Console for Cloud Manager API.

2. Generated the public key at cloud manager and downloaded the private key at local.

3. Installed the aio cli plugin to connect.

4. run the below command through terminal

aio cloudmanager:program:list-pipelines -p <program-id>       --- This give me list of pipeline.

 

when i trying to trigger the pipeline using below command it gives me Access Denied error

aio cloudmanager:pipeline:create-execution <pipeline-id> -p <program-id>

 

Error :::

 

starting execution... [CloudManagerSDK:ERROR_PIPELINE_START] Cannot create execution: https://cloudmanager.adobe.io/api/program/<program-id>/pipeline/<pipeline-id>/execution (403 Forbidden) - Access Denied(s): Access is denied

 

Note : <program-id> and <pipeline-id> has the real value.

 

Please help to resolve the issue.

 

Thanks in advance.

Accepted Solutions (1)

Accepted Solutions (1)

Avatar

Avatar

shelly-goel

Avatar

shelly-goel

shelly-goel

18-12-2020

Hello @punit-khatri

Since you're getting "Access Denied" (403 Forbidden) error, it implies there are not enough permissions to execute a pipeline in the Cloud Manager API. You probably just have "Developer" profile added in the API so you're able to fetch the pipelines. Though for the pipeline execution, you need to add at least "Deployment Manager" profile (other profiles are "Release Manager" & "Program Manager").

You can go to the Cloud Manager API in the developer console and under the API, there would be an option to Edit / Add Profiles. If you do not see those profiles listed (means you cannot execute the pipeline from the UI as well), your org admin would be able to add you to relevant profiles OR the integration has to be created by someone entitled to that profile and share the private key with you to set it up in your AIO cloud manager CLI plugin.

 

 

Answers (1)

Answers (1)

Avatar

Avatar

punit-khatri

Avatar

punit-khatri

punit-khatri

18-12-2020

Hi Shell Goel,

 

we have created one parent product profile "AEM Managed Services - changi-airport-cloudmanager" and under this add the below mentioned roles. and i have entitled to this profile.

"Developer", "Deployment Manager", "Program Manager" and "Business Owner" role. same screenshot attached below

Role.jpeg

 

same product profile I have chosen. screenshot attached below.

Product Profile.jpeg

 

Let me know if any more info required. 

 

Thanks

Punit