Authorization Error 6691623 with Keycloak Token on ONTAP API Call | NetApp | Page 1

Hello Community,

I'm currently integrating OAuth 2.0 with ONTAP using Keycloak as the authorization server. I've set up a client on Keycloak and configured ONTAP for OAuth 2.0 authentication. I successfully obtain an access token from Keycloak, but when I try to use this token to make an API call to ONTAP, I encounter an authorization error.

Here's the curl command I'm using:

curl --request GET \
     --location "https://$FQDN_IP/api/cluster?fields=version" \
     --include \
     --header "Accept: */*" \
     --header "Authorization: Bearer $ACCESS_TOKEN"

Unfortunately, this results in an error with code 6691623 and the message "User is not authorized."

I've double-checked the token and permissions set in Keycloak, and everything seems to be configured correctly. I am just not confortable at all with roles and users. I though that having the token would allow me to interact with the API.. but there is something I am missing..

#Authorization Error 6691623 with Keycloak Token on ONTAP API Call