Forum Discussion
CirrostratusWhat's user role for get information with Rest API to F5
AltostratusTo get info via REST API on an F5 device, the user needs a role like "Administrator" or "Resource Administrator" — basically, any role with read access to the resources you're querying.
CirrostratusHi Hafizailam,
Thank you vert much for information, do you have link about this information?
- Injeyan_Kostas
Nacreous
You definitely not need an admin account for this.
Guest account has read only access and should be enough
Next option is to use Auditor role
- Injeyan_Kostas
Moreover please check with a local account using guest role.
Just to eliminate remote authentication for testing.
- Teerarat
Hi Injeyan,
We using external tacacs server for authentication and user role is operator but we cannot get API information from BIG-IP, This user can authentication via GUI, Do you have any suggest ?
- Injeyan_Kostas
I just reproduced remote auth with Guest role, but with AD and works fine
1)
POST /mgmt/shared/authn/login HTTP/1.1
Host: BIGIP_IP{"username":"remote-username", "password":"remote-password", "loginProviderName":"tmos"}
2) you should get a token in the response
3)
GET /mgmt/tm/sys/version HTTP/1.1
Host: BIGIP_IP
X-F5-Auth-Token: token_from_step_2are you able at least to get a token for the remote user?
chech this also https://my.f5.com/manage/s/article/K55510624
- hafizaislam
You are most welcome
