Forum Discussion
CirrostratusWhat's user role for get information with Rest API to F5
CirrostratusHi Hafizailam,
Thank you vert much for information, do you have link about this information?
NacreousYou definitely not need an admin account for this.
Guest account has read only access and should be enough
Next option is to use Auditor role
- Injeyan_Kostas
Moreover please check with a local account using guest role.
Just to eliminate remote authentication for testing.
- Teerarat
Hi Injeyan,
We using external tacacs server for authentication and user role is operator but we cannot get API information from BIG-IP, This user can authentication via GUI, Do you have any suggest ?
- Injeyan_Kostas
I just reproduced remote auth with Guest role, but with AD and works fine
1)
POST /mgmt/shared/authn/login HTTP/1.1
Host: BIGIP_IP{"username":"remote-username", "password":"remote-password", "loginProviderName":"tmos"}
2) you should get a token in the response
3)
GET /mgmt/tm/sys/version HTTP/1.1
Host: BIGIP_IP
X-F5-Auth-Token: token_from_step_2are you able at least to get a token for the remote user?
chech this also https://my.f5.com/manage/s/article/K55510624- Injeyan_Kostas
Hi Teerarat
Did you manage to test it?
